Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-27137 (GCVE-0-2026-27137)
Vulnerability from cvelistv5 – Published: 2026-03-06 21:28 – Updated: 2026-08-20 12:31
VLAI
EPSS
VEX
Title
Incorrect enforcement of email constraints in crypto/x509
Summary
When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-03-10 13:32 UTC
CWE
- CWE-295 - Improper Certificate Validation
Assigner
References
56 references
Impacted products
110 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Go standard library | crypto/x509 |
Affected:
1.26.0-0 , < 1.26.1
(semver)
|
guessed | |
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.2.3-4.el10_1 , < *
(rpm)
Unaffected: 0:0.2.7-3.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.1 cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:1.25.2-3.el10_1 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.1 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:1.26.2-2.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.9.27-6.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:165.1-2.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:52.1-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.2.3-4.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:1.26.2-1.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:165.1-2.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:52.1-1.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
6:0.8.5-2.el9_6.2 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat OpenStack Platform 16.2 |
Unaffected:
0:0.2.1-1.1.el8ost , < *
(rpm)
cpe:/a:redhat:openstack:16.2::el8 |
||
| Red Hat | Red Hat OpenStack Platform 16.2 |
Unaffected:
0:3.3.23-22.el8ost , < *
(rpm)
cpe:/a:redhat:openstack:16.2::el8 |
||
| Red Hat | Red Hat OpenStack Platform 17.1 for RHEL 9 |
Unaffected:
0:3.4.26-9.5.el9ost , < *
(rpm)
cpe:/a:redhat:openstack:17.1::el9 |
||
| Red Hat | Red Hat OpenStack Services on OpenShift 18.0 |
Unaffected:
0:0.1.1-18.0.20260602234716.a95ae05.el9ost , < *
(rpm)
cpe:/a:redhat:openstack:18.0::el9 |
||
| Red Hat | RHEM 1.0 for RHEL 9 |
Unaffected:
0:1.0.3-1.el9em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
||
| Red Hat | RHEM 1.1 for RHEL 10 |
Unaffected:
0:1.1.3-1.el10em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
||
| Red Hat | RHEM 1.1 for RHEL 9 |
Unaffected:
0:1.1.3-1.el9em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
||
| Red Hat | Builds for Red Hat OpenShift 1.6.1 |
Unaffected:
1774334066 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.6::el9 |
||
| Red Hat | DevWorkspace Operator 0.4 |
Unaffected:
1776457293 , < *
(rpm)
cpe:/a:redhat:devworkspace:0.40::el9 |
||
| Red Hat | Logging for Red Hat OpenShift 6.4 |
Unaffected:
1780051640 , < *
(rpm)
cpe:/a:redhat:logging:6.4::el9 |
||
| Red Hat | Logging Subsystem for Red Hat OpenShift 6 |
Unaffected:
1781192891 , < *
(rpm)
cpe:/a:redhat:logging:6.0::el9 |
||
| Red Hat | Logging Subsystem for Red Hat OpenShift 6.2 |
Unaffected:
1776800087 , < *
(rpm)
cpe:/a:redhat:logging:6.2::el9 |
||
| Red Hat | Multicluster Global Hub 1.3.4 |
Unaffected:
1779210675 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.3::el9 |
||
| Red Hat | Multicluster Global Hub 1.4.8 |
Unaffected:
1779838819 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.4::el9 |
||
| Red Hat | Multicluster Global Hub 1.6.2 |
Unaffected:
1780320809 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.6::el9 |
||
| Red Hat | OpenShift API for Data Protection 1.4 |
Unaffected:
1779809598 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.4::el9 |
||
| Red Hat | OpenShift API for Data Protection 1.5 |
Unaffected:
1779808027 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.5::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.15 |
Unaffected:
1774085848 , < *
(rpm)
cpe:/a:redhat:acm:2.15::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.6 |
Unaffected:
1777391542 , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
||
| Red Hat | Red Hat Hardened Images |
Unaffected:
1.26.2-1.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
||
| Red Hat | Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 |
Unaffected:
1.0.2-1776288486 , < *
(rpm)
cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9 |
||
| Red Hat | Red Hat Migration Toolkit 1.8 |
Unaffected:
1783914276 , < *
(rpm)
cpe:/a:redhat:rhmt:1.8::el8 |
||
| Red Hat | Red Hat multicluster global hub 1.5.1 |
Unaffected:
1773650627 , < *
(rpm)
Unaffected: 1779828691 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.5::el9 |
||
| Red Hat | Red Hat OpenShift AI 2.25 |
Unaffected:
1776773362 , < *
(rpm)
cpe:/a:redhat:openshift_ai:2.25::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.7.4 |
Unaffected:
1776846936 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.7::el9 |
||
| Red Hat | Red Hat OpenShift Dev Spaces 3.27 |
Unaffected:
1776789889 , < *
(rpm)
cpe:/a:redhat:openshift_devspaces:3.27::el9 |
||
| Red Hat | Red Hat OpenShift distributed tracing 3.9.2 |
Unaffected:
1776435680 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.9::el9 |
||
| Red Hat | Red Hat OpenShift GitOps 1.18 |
Unaffected:
1776755965 , < *
(rpm)
cpe:/a:redhat:openshift_gitops:1.18::el8 |
||
| Red Hat | Red Hat OpenShift GitOps 1.19 |
Unaffected:
1776767162 , < *
(rpm)
cpe:/a:redhat:openshift_gitops:1.19::el8 |
||
| Red Hat | Red Hat OpenShift GitOps 1.2 |
Unaffected:
1776773421 , < *
(rpm)
cpe:/a:redhat:openshift_gitops:1.20::el9 |
||
| Red Hat | Red Hat Quay 3.16 |
Unaffected:
1779204086 , < *
(rpm)
cpe:/a:redhat:quay:3.16::el9 |
||
| Red Hat | Red Hat Satellite 6.18 |
Unaffected:
1778082595 , < *
(rpm)
cpe:/a:redhat:satellite:6.18::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1776339099 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
||
| Red Hat | Red Hat Web Terminal 1.11 |
Unaffected:
1776966691 , < *
(rpm)
cpe:/a:redhat:webterminal:1.11::el9 |
||
| Red Hat | Red Hat Web Terminal 1.12 |
Unaffected:
1776959849 , < *
(rpm)
cpe:/a:redhat:webterminal:1.12::el9 |
||
| Red Hat | Red Hat Web Terminal 1.13 |
Unaffected:
1776197785 , < *
(rpm)
cpe:/a:redhat:webterminal:1.13::el9 |
||
| Red Hat | Red Hat Web Terminal 1.14 |
Unaffected:
1776199398 , < *
(rpm)
cpe:/a:redhat:webterminal:1.14::el9 |
||
| Red Hat | Red Hat Web Terminal 1.15 |
Unaffected:
1775672762 , < *
(rpm)
cpe:/a:redhat:webterminal:1.15::el9 |
||
| Red Hat | Assisted Installer for Red Hat OpenShift Container Platform 2 |
cpe:/a:redhat:assisted_installer:2
|
||
| Red Hat | cert-manager Operator for Red Hat OpenShift |
cpe:/a:redhat:cert_manager:1
|
||
| Red Hat | Compliance Operator |
cpe:/a:redhat:openshift_compliance_operator:1
|
||
| Red Hat | Confidential Compute Attestation |
cpe:/a:redhat:confidential_compute_attestation:1
|
||
| Red Hat | Cryostat 4 |
cpe:/a:redhat:cryostat:4
|
||
| Red Hat | Custom Metric Autoscaler operator for Red Hat Openshift |
cpe:/a:redhat:openshift_custom_metrics_autoscaler:2
|
||
| Red Hat | Deployment Validation Operator |
cpe:/a:redhat:deployment_validator_operator
|
||
| Red Hat | ExternalDNS Operator |
cpe:/a:redhat:ext_dns_optr:1
|
||
| Red Hat | External Secrets Operator for Red Hat OpenShift |
cpe:/a:redhat:external_secrets_operator:1
|
||
| Red Hat | Fence Agents Remediation Operator |
cpe:/a:redhat:workload_availability_far:0
|
||
| Red Hat | File Integrity Operator |
cpe:/a:redhat:openshift_file_integrity_operator:1
|
||
| Red Hat | Gatekeeper 3 |
cpe:/a:redhat:gatekeeper:3
|
||
| Red Hat | Logging Subsystem for Red Hat OpenShift |
cpe:/a:redhat:logging:5
|
||
| Red Hat | Logical Volume Manager Storage |
cpe:/a:redhat:lvms:4
|
||
| Red Hat | Machine Deletion Remediation Operator |
cpe:/a:redhat:workload_availability_mdr:0
|
||
| Red Hat | Migration Toolkit for Applications 8 |
cpe:/a:redhat:migration_toolkit_applications:8
|
||
| Red Hat | mirror registry for Red Hat OpenShift |
cpe:/a:redhat:mirror_registry:1
|
||
| Red Hat | mirror registry for Red Hat OpenShift 2 |
cpe:/a:redhat:mirror_registry:2
|
||
| Red Hat | Multicluster Engine for Kubernetes |
cpe:/a:redhat:multicluster_engine
|
||
| Red Hat | Network Observability Operator |
cpe:/a:redhat:network_observ_optr:1
|
||
| Red Hat | Node HealthCheck Operator |
cpe:/a:redhat:workload_availability_nhc:0
|
||
| Red Hat | OpenShift Developer Tools and Services |
cpe:/a:redhat:ocp_tools
|
||
| Red Hat | OpenShift Lightspeed |
cpe:/a:redhat:openshift_lightspeed
|
||
| Red Hat | OpenShift Pipelines |
cpe:/a:redhat:openshift_pipelines:1
|
||
| Red Hat | OpenShift Serverless |
cpe:/a:redhat:serverless:1
|
||
| Red Hat | OpenShift Service Mesh 2 |
cpe:/a:redhat:service_mesh:2
|
||
| Red Hat | OpenShift Service Mesh 3 |
cpe:/a:redhat:service_mesh:3
|
||
| Red Hat | Power monitoring for Red Hat OpenShift |
cpe:/a:redhat:openshift_power_monitoring
|
||
| Red Hat | Red Hat 3scale API Management Platform 2 |
cpe:/a:redhat:red_hat_3scale_amp:2
|
||
| Red Hat | Red Hat Advanced Cluster Security 4 |
cpe:/a:redhat:advanced_cluster_security:4
|
||
| Red Hat | Red Hat Ansible Automation Platform 2 |
cpe:/a:redhat:ansible_automation_platform:2
|
||
| Red Hat | Red Hat build of Apache Camel - HawtIO 4 |
cpe:/a:redhat:apache_camel_hawtio:4
|
||
| Red Hat | Red Hat Certification Program for Red Hat Enterprise Linux 9 |
cpe:/a:redhat:certifications:9
|
||
| Red Hat | Red Hat Connectivity Link 1 |
cpe:/a:redhat:connectivity_link:1
|
||
| Red Hat | Red Hat Developer Hub |
cpe:/a:redhat:rhdh:1
|
||
| Red Hat | Red Hat Edge Manager 1 |
cpe:/a:redhat:edge_manager:1
|
||
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10
|
||
| Red Hat | Red Hat Enterprise Linux 7 |
cpe:/o:redhat:enterprise_linux:7
|
||
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8
|
||
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9
|
||
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 |
cpe:/a:redhat:enterprise_linux_ai:3
|
||
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai
|
||
| Red Hat | Red Hat OpenShift Cluster Manager CLI |
cpe:/a:redhat:openshift_cluster_manager_cli:1
|
||
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4
|
||
| Red Hat | Red Hat Openshift Data Foundation 4 |
cpe:/a:redhat:openshift_data_foundation:4
|
||
| Red Hat | Red Hat OpenShift for Windows Containers |
cpe:/a:redhat:windows_machine_config
|
||
| Red Hat | Red Hat OpenShift on AWS |
cpe:/a:redhat:openshift_service_on_aws:1
|
||
| Red Hat | Red Hat OpenShift Virtualization 4 |
cpe:/a:redhat:container_native_virtualization:4
|
||
| Red Hat | Red Hat OpenStack Platform 16.2 |
cpe:/a:redhat:openstack:16.2
|
||
| Red Hat | Red Hat OpenStack Platform 17.1 |
cpe:/a:redhat:openstack:17.1
|
||
| Red Hat | Red Hat OpenStack Platform 18.0 |
cpe:/a:redhat:openstack:18.0
|
||
| Red Hat | Red Hat Quay 3 |
cpe:/a:redhat:quay:3
|
||
| Red Hat | Red Hat Satellite 6 |
cpe:/a:redhat:satellite:6
|
||
| Red Hat | Red Hat Service Interconnect 1 |
cpe:/a:redhat:service_interconnect:1
|
||
| Red Hat | Red Hat Service Interconnect 2 |
cpe:/a:redhat:service_interconnect:2
|
||
| Red Hat | Security Profiles Operator |
cpe:/a:redhat:openshift_security_profiles_operator:1
|
||
| Red Hat | Service Telemetry Framework 1.5 |
cpe:/a:redhat:stf:1.5
|
||
| Red Hat | streams for Apache Kafka 3 |
cpe:/a:redhat:amq_streams:3
|
||
| Red Hat | Zero Trust Workload Identity Manager |
cpe:/a:redhat:zero_trust_workload_identity_manager:1
|
||
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview |
cpe:/a:redhat:zero_trust_workload_identity_manager:0
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-27137",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-03-10T13:32:09.097820Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-03-10T13:32:53.202Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.1",
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "rhc-worker-playbook",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.2.3-4.el10_1",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.2.7-3.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.1"
],
"defaultStatus": "affected",
"packageName": "delve",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.25.2-3.el10_1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.2-2.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "golang-github-openprinting-ipp-usb",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.9.27-6.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:165.1-2.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:52.1-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "rhc-worker-playbook",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.2.3-4.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.2-1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:165.1-2.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:52.1-1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "6:0.8.5-2.el9_6.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openstack:16.2::el8"
],
"defaultStatus": "affected",
"packageName": "collectd-sensubility",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.2.1-1.1.el8ost",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openstack:16.2::el8"
],
"defaultStatus": "affected",
"packageName": "etcd",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.3.23-22.el8ost",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"defaultStatus": "affected",
"packageName": "etcd",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.4.26-9.5.el9ost",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0::el9"
],
"defaultStatus": "affected",
"packageName": "golang-github-openstack-k8s-operators-os-diff",
"product": "Red Hat OpenStack Services on OpenShift 18.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.1.1-18.0.20260602234716.a95ae05.el9ost",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.0 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.0.3-1.el9em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.1 for RHEL 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.1.3-1.el10em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.1 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.1.3-1.el9em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.6::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-waiters-rhel9",
"product": "Builds for Red Hat OpenShift 1.6.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1774334066",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:devworkspace:0.40::el9"
],
"defaultStatus": "affected",
"packageName": "devworkspace/devworkspace-rhel9-operator",
"product": "DevWorkspace Operator 0.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776457293",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.4::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging for Red Hat OpenShift 6.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780051640",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift 6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781192891",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift 6.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776800087",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Multicluster Global Hub 1.3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779210675",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Multicluster Global Hub 1.4.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779838819",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Multicluster Global Hub 1.6.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780320809",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-rhel9",
"product": "OpenShift API for Data Protection 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779809598",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-rhel9",
"product": "OpenShift API for Data Protection 1.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779808027",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.15::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/subctl-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1774085848",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-26/receptor-rhel9",
"product": "Red Hat Ansible Automation Platform 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777391542",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "golang1-26-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1.26.2-1.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator",
"product": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1.0.2-1776288486",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhmt:1.8::el8"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-registry-rhel8",
"product": "Red Hat Migration Toolkit 1.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783914276",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Red Hat multicluster global hub 1.5.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1773650627",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1779828691",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:2.25::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-rhel9-operator",
"product": "Red Hat OpenShift AI 2.25",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776773362",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.7::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-waiters-rhel9",
"product": "Red Hat OpenShift Builds 1.7.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776846936",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3.27::el9"
],
"defaultStatus": "affected",
"packageName": "devspaces/udi-rhel9",
"product": "Red Hat OpenShift Dev Spaces 3.27",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776789889",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/tempo-rhel9",
"product": "Red Hat OpenShift distributed tracing 3.9.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776435680",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1.18::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/dex-rhel8",
"product": "Red Hat OpenShift GitOps 1.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776755965",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1.19::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/dex-rhel8",
"product": "Red Hat OpenShift GitOps 1.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776767162",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/dex-rhel9",
"product": "Red Hat OpenShift GitOps 1.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776773421",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.16::el9"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779204086",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:satellite:6.18::el9"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-vmaas-rhel9",
"product": "Red Hat Satellite 6.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778082595",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/client-server-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776339099",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.11::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776966691",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.12::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776959849",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.13::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776197785",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.14::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776199398",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.15::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1775672762",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:assisted_installer:2"
],
"defaultStatus": "affected",
"packageName": "rhai/assisted-installer-rhel9",
"product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cert_manager:1"
],
"defaultStatus": "unaffected",
"packageName": "cert-manager/jetstack-cert-manager-rhel9",
"product": "cert-manager Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_compliance_operator:1"
],
"defaultStatus": "unaffected",
"packageName": "compliance/openshift-compliance-operator-bundle",
"product": "Compliance Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "build-of-trustee/trustee-rhel9-operator",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cryostat:4"
],
"defaultStatus": "unaffected",
"packageName": "cryostat/cryostat-storage-rhel9",
"product": "Cryostat 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
],
"defaultStatus": "unaffected",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9",
"product": "Custom Metric Autoscaler operator for Red Hat Openshift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:deployment_validator_operator"
],
"defaultStatus": "affected",
"packageName": "dvo/deployment-validation-rhel8-operator",
"product": "Deployment Validation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ext_dns_optr:1"
],
"defaultStatus": "affected",
"packageName": "edo/external-dns-rhel8",
"product": "ExternalDNS Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ext_dns_optr:1"
],
"defaultStatus": "affected",
"packageName": "edo/external-dns-rhel9",
"product": "ExternalDNS Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:external_secrets_operator:1"
],
"defaultStatus": "unaffected",
"packageName": "external-secrets-operator/external-secrets-rhel9",
"product": "External Secrets Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_far:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/fence-agents-remediation-rhel8-operator",
"product": "Fence Agents Remediation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_file_integrity_operator:1"
],
"defaultStatus": "unaffected",
"packageName": "compliance/openshift-compliance-operator-bundle",
"product": "File Integrity Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:gatekeeper:3"
],
"defaultStatus": "affected",
"packageName": "gatekeeper/gatekeeper-rhel9-operator",
"product": "Gatekeeper 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/logging-loki-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "affected",
"packageName": "lvms4/lvms-rhel9-operator",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "affected",
"packageName": "lvms4/topolvm-rhel8",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "affected",
"packageName": "lvms4/topolvm-rhel9",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_mdr:0"
],
"defaultStatus": "unaffected",
"packageName": "workload-availability/machine-deletion-remediation-rhel8-operator",
"product": "Machine Deletion Remediation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8"
],
"defaultStatus": "unaffected",
"packageName": "mta/mta-cli-rhel9",
"product": "Migration Toolkit for Applications 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:mirror_registry:1"
],
"defaultStatus": "affected",
"packageName": "openshift/mirror-registry-rhel8",
"product": "mirror registry for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:mirror_registry:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift/mirror-registry-rhel8",
"product": "mirror registry for Red Hat OpenShift 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unaffected",
"packageName": "multicluster-engine/discovery-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "unaffected",
"packageName": "network-observability/network-observability-cli-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "unaffected",
"packageName": "workload-availability/node-healthcheck-rhel8-operator",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "affected",
"packageName": "helm",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "affected",
"packageName": "ocp-tools-4/jenkins-agent-base-rhel9",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "affected",
"packageName": "ocp-tools-4/jenkins-rhel8",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines-client",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "unaffected",
"packageName": "kn-workflow-plugin",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-plugin-event-sender-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-clients",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-golang-builder-container",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-rhel8",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-golang-builder-container",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_power_monitoring"
],
"defaultStatus": "unaffected",
"packageName": "openshift-power-monitoring/kepler-rhel9",
"product": "Power monitoring for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp2/3scale-rhel7-operator",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp2/3scale-rhel9-operator",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp26/3scale-operator",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp26/operator",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4"
],
"defaultStatus": "unaffected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "ansible-automation-platform/platform-operator-bundle",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-gateway-proxy",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-gateway-proxy-openssl30",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-gateway-proxy-openssl32",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.11-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.11-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.12-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.12-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3x-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:apache_camel_hawtio:4"
],
"defaultStatus": "affected",
"packageName": "hawtio-operator-container",
"product": "Red Hat build of Apache Camel - HawtIO 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:certifications:9"
],
"defaultStatus": "affected",
"packageName": "redhat-certification-preflight",
"product": "Red Hat Certification Program for Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "affected",
"packageName": "rhcl-1/coredns-rhel9",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhdh:1"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-rhel9-operator",
"product": "Red Hat Developer Hub",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1"
],
"defaultStatus": "unaffected",
"packageName": "rhem/flightctl-ui-rhel9",
"product": "Red Hat Edge Manager 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "butane",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "conmon",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "go-fdo-client",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "go-fdo-server",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "ignition",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "rhel10/bootc-image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "toolbox",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "trustee",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "trustee-guest-components",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "yggdrasil",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unaffected",
"packageName": "host-metering",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unaffected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unaffected",
"packageName": "rhc-worker-script",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/buildah",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "container-tools:rhel8/conmon",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "container-tools:rhel8/containernetworking-plugins",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/podman",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/runc",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/skopeo",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/toolbox",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "go-toolset:rhel8/golang",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "weldr-client",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "butane",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "conmon",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "containernetworking-plugins",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "ignition",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "rhel9/bootc-image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "runc",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "toolbox",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "trustee-guest-components",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "weldr-client",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-cli-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-rhel8-operator",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_cluster_manager_cli:1"
],
"defaultStatus": "affected",
"packageName": "ocm-cli-clients/ocm-cli-rhel9",
"product": "Red Hat OpenShift Cluster Manager CLI",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "butane",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "conmon",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "conmon-rs",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "containernetworking-plugins",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "cri-o",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "cri-tools",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "golang-github-prometheus-promu",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "ignition",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "kata-containers",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "microshift",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/frr-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/frr-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-sdn-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift-clients",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift-golang-builder-container",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift-kuryr",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "ose-aws-ecr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "ose-azure-acr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "ose-gcp-gcr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "podman",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "runc",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "skopeo",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:windows_machine_config"
],
"defaultStatus": "unaffected",
"packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
"product": "Red Hat OpenShift for Windows Containers",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_service_on_aws:1"
],
"defaultStatus": "affected",
"packageName": "rosa",
"product": "Red Hat OpenShift on AWS",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/virt-api",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/virt-api-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "kubevirt",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift-golang-builder-container",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "affected",
"packageName": "golang-github-infrawatch-apputils",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "unaffected",
"packageName": "rhosp-rhel8/osp-director-agent",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "unaffected",
"packageName": "collectd-libpod-stats",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "golang-github-infrawatch-apputils",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "unaffected",
"packageName": "rhosp-rhel9/osp-director-agent",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "affected",
"packageName": "rhoso-operators/sg-core-rhel9",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "unaffected",
"packageName": "quay/quay-builder-rhel8",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unaffected",
"packageName": "satellite:el8/yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:1"
],
"defaultStatus": "unaffected",
"packageName": "skupper-cli",
"product": "Red Hat Service Interconnect 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:2"
],
"defaultStatus": "unaffected",
"packageName": "skupper-cli",
"product": "Red Hat Service Interconnect 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_security_profiles_operator:1"
],
"defaultStatus": "unaffected",
"packageName": "compliance/openshift-selinuxd-rhel8",
"product": "Security Profiles Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:stf:1.5"
],
"defaultStatus": "unaffected",
"packageName": "stf/sg-core-rhel9",
"product": "Service Telemetry Framework 1.5",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_streams:3"
],
"defaultStatus": "affected",
"packageName": "golang-github-danielqsj-kafka_exporter",
"product": "streams for Apache Kafka 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
}
],
"datePublic": "2026-03-06T21:28:13.748Z",
"descriptions": [
{
"lang": "en",
"value": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-295",
"description": "Improper Certificate Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-20T12:31:59.833Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"name": "RHBZ#2445345",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27137.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28047"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10929"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8842"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10169"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19022"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22937"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19049"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22450"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19132"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28038"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19181"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23228"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22714"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:5549"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9872"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11800"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26585"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22862"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22423"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22347"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23345"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26568"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8151"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13545"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9052"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10184"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10158"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9697"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9698"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9699"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:14879"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10125"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10250"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10225"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8338"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8337"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8167"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:5110"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21769"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:54757: Red Hat OpenStack Platform 16.2"
},
{
"lang": "en",
"value": "RHSA-2026:36796: RHEM 1.0 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:28047: Red Hat OpenStack Platform 17.1"
},
{
"lang": "en",
"value": "RHSA-2026:39810: 9Base-RHOSO-TOOLS-18, Red Hat OpenStack Services on OpenShift 18.0"
},
{
"lang": "en",
"value": "RHSA-2026:10929: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:8842: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:10169: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19022: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:22937: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19049: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:22450: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19132: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:28038: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:19181: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:23228: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:22714: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:5549: Builds for Red Hat OpenShift 1.6.1"
},
{
"lang": "en",
"value": "RHSA-2026:9872: DevWorkspace Operator 0.4"
},
{
"lang": "en",
"value": "RHSA-2026:11800: Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"lang": "en",
"value": "RHSA-2026:26585: Logging Subsystem for Red Hat OpenShift 6"
},
{
"lang": "en",
"value": "RHSA-2026:22862: Logging for Red Hat OpenShift 6.4"
},
{
"lang": "en",
"value": "RHSA-2026:22423: Multicluster Global Hub 1.3.4"
},
{
"lang": "en",
"value": "RHSA-2026:22347: Multicluster Global Hub 1.4.8"
},
{
"lang": "en",
"value": "RHSA-2026:23345: Multicluster Global Hub 1.6.2"
},
{
"lang": "en",
"value": "RHSA-2026:29854: OpenShift API for Data Protection 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:26568: OpenShift API for Data Protection 1.5"
},
{
"lang": "en",
"value": "RHSA-2026:8151: Red Hat Advanced Cluster Management for Kubernetes 2.15"
},
{
"lang": "en",
"value": "RHSA-2026:13545: Red Hat Ansible Automation Platform 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:7291: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:9052: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
},
{
"lang": "en",
"value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
},
{
"lang": "en",
"value": "RHSA-2026:10184: Red Hat OpenShift AI 2.25"
},
{
"lang": "en",
"value": "RHSA-2026:10158: Red Hat OpenShift Builds 1.7.4"
},
{
"lang": "en",
"value": "RHSA-2026:10175: Red Hat OpenShift Dev Spaces 3.27"
},
{
"lang": "en",
"value": "RHSA-2026:9697: Red Hat OpenShift GitOps 1.18"
},
{
"lang": "en",
"value": "RHSA-2026:9698: Red Hat OpenShift GitOps 1.19"
},
{
"lang": "en",
"value": "RHSA-2026:9699: Red Hat OpenShift GitOps 1.2"
},
{
"lang": "en",
"value": "RHSA-2026:9385: Red Hat OpenShift distributed tracing 3.9.2"
},
{
"lang": "en",
"value": "RHSA-2026:19375: Red Hat Quay 3.16"
},
{
"lang": "en",
"value": "RHSA-2026:14879: Red Hat Satellite 6.18"
},
{
"lang": "en",
"value": "RHSA-2026:10125: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:10250: Red Hat Web Terminal 1.11"
},
{
"lang": "en",
"value": "RHSA-2026:10225: Red Hat Web Terminal 1.12"
},
{
"lang": "en",
"value": "RHSA-2026:8338: Red Hat Web Terminal 1.13"
},
{
"lang": "en",
"value": "RHSA-2026:8337: Red Hat Web Terminal 1.14"
},
{
"lang": "en",
"value": "RHSA-2026:8167: Red Hat Web Terminal 1.15"
},
{
"lang": "en",
"value": "RHSA-2026:5110: Red Hat multicluster global hub 1.5.1"
},
{
"lang": "en",
"value": "RHSA-2026:21769: Red Hat multicluster global hub 1.5.1"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-03-06T22:01:38.859Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-03-06T21:28:13.748Z",
"value": "Made public."
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"workarounds": [
{
"lang": "en",
"value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"collectionURL": "https://pkg.go.dev",
"defaultStatus": "unaffected",
"packageName": "crypto/x509",
"product": "crypto/x509",
"programRoutines": [
{
"name": "newEmailConstraints"
},
{
"name": "emailConstraints.query"
},
{
"name": "checkConstraints"
},
{
"name": "checkChainConstraints"
},
{
"name": "parseMailboxes"
},
{
"name": "Certificate.Verify"
}
],
"vendor": "Go standard library",
"versions": [
{
"lessThan": "1.26.1",
"status": "affected",
"version": "1.26.0-0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Jakub Ciolek"
}
],
"descriptions": [
{
"lang": "en",
"value": "When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-295: Improper Certificate Validation",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-03-08T05:56:20.771Z",
"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"shortName": "Go"
},
"references": [
{
"url": "https://go.dev/cl/752182"
},
{
"url": "https://go.dev/issue/77952"
},
{
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"title": "Incorrect enforcement of email constraints in crypto/x509"
}
},
"cveMetadata": {
"assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"assignerShortName": "Go",
"cveId": "CVE-2026-27137",
"datePublished": "2026-03-06T21:28:13.748Z",
"dateReserved": "2026-02-17T19:57:28.434Z",
"dateUpdated": "2026-08-20T12:31:59.833Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-27137",
"date": "2026-08-21",
"epss": "0.00606",
"percentile": "0.46483"
},
"microsoft_vex": {
"current_release_date": "2026-03-14T01:37:36.000Z",
"cve": "CVE-2026-27137",
"id": "msrc_CVE-2026-27137",
"initial_release_date": "2026-03-02T00:00:00.000Z",
"product_status:fixed": "2",
"product_status:known_affected": "2",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "Incorrect enforcement of email constraints in crypto/x509",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-27137.json",
"version": "2"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-27137\",\"sourceIdentifier\":\"security@golang.org\",\"published\":\"2026-03-06T22:16:00.850\",\"lastModified\":\"2026-08-19T12:17:37.737\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.\"},{\"lang\":\"es\",\"value\":\"Al verificar una cadena de certificados que contiene un certificado con m\u00faltiples restricciones de direcci\u00f3n de correo electr\u00f3nico que comparten porciones locales comunes pero porciones de dominio diferentes, estas restricciones no se aplicar\u00e1n correctamente, y solo la \u00faltima restricci\u00f3n ser\u00e1 considerada.\"}],\"affected\":[{\"source\":\"security@golang.org\",\"affectedData\":[{\"vendor\":\"Go standard library\",\"product\":\"crypto/x509\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://pkg.go.dev\",\"packageName\":\"crypto/x509\",\"programRoutines\":[{\"name\":\"newEmailConstraints\"},{\"name\":\"emailConstraints.query\"},{\"name\":\"checkConstraints\"},{\"name\":\"checkChainConstraints\"},{\"name\":\"parseMailboxes\"},{\"name\":\"Certificate.Verify\"}],\"versions\":[{\"version\":\"1.26.0-0\",\"lessThan\":\"1.26.1\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhc-worker-playbook\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.1\",\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.2.3-4.el10_1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"0:0.2.7-3.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"delve\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.1\"],\"versions\":[{\"version\":\"0:1.25.2-3.el10_1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:1.26.2-2.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"golang-github-openprinting-ipp-usb\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.9.27-6.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:165.1-2.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:52.1-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc-worker-playbook\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.2.3-4.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:1.26.2-1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:165.1-2.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"image-builder\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:52.1-1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"6:0.8.5-2.el9_6.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"collectd-sensubility\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2::el8\"],\"versions\":[{\"version\":\"0:0.2.1-1.1.el8ost\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"etcd\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2::el8\"],\"versions\":[{\"version\":\"0:3.3.23-22.el8ost\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"etcd\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1::el9\"],\"versions\":[{\"version\":\"0:3.4.26-9.5.el9ost\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Services on OpenShift 18.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-openstack-k8s-operators-os-diff\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0::el9\"],\"versions\":[{\"version\":\"0:0.1.1-18.0.20260602234716.a95ae05.el9ost\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.0 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"0:1.0.3-1.el9em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.1 for RHEL 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"0:1.1.3-1.el10em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.1 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"0:1.1.3-1.el9em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Builds for Red Hat OpenShift 1.6.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-waiters-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.6::el9\"],\"versions\":[{\"version\":\"1774334066\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"DevWorkspace Operator 0.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"devworkspace/devworkspace-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:devworkspace:0.40::el9\"],\"versions\":[{\"version\":\"1776457293\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging for Red Hat OpenShift 6.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.4::el9\"],\"versions\":[{\"version\":\"1780051640\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.0::el9\"],\"versions\":[{\"version\":\"1781192891\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift 6.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.2::el9\"],\"versions\":[{\"version\":\"1776800087\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.3::el9\"],\"versions\":[{\"version\":\"1779210675\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.4.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"],\"versions\":[{\"version\":\"1779838819\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.6.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"],\"versions\":[{\"version\":\"1780320809\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-velero-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.4::el9\"],\"versions\":[{\"version\":\"1779809598\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-velero-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.5::el9\"],\"versions\":[{\"version\":\"1779808027\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/subctl-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.15::el9\"],\"versions\":[{\"version\":\"1774085848\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ansible-automation-platform-26/receptor-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"1777391542\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang1-26-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"1.26.2-1.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9\"],\"versions\":[{\"version\":\"1.0.2-1776288486\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit 1.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhmtc/openshift-migration-registry-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhmt:1.8::el8\"],\"versions\":[{\"version\":\"1783914276\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat multicluster global hub 1.5.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.5::el9\"],\"versions\":[{\"version\":\"1773650627\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1779828691\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 2.25\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:2.25::el9\"],\"versions\":[{\"version\":\"1776773362\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.7.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-waiters-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.7::el9\"],\"versions\":[{\"version\":\"1776846936\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces 3.27\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"devspaces/udi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3.27::el9\"],\"versions\":[{\"version\":\"1776789889\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.9.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/tempo-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"],\"versions\":[{\"version\":\"1776435680\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps 1.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-gitops-1/dex-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1.18::el8\"],\"versions\":[{\"version\":\"1776755965\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps 1.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-gitops-1/dex-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1.19::el8\"],\"versions\":[{\"version\":\"1776767162\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps 1.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-gitops-1/dex-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1.20::el9\"],\"versions\":[{\"version\":\"1776773421\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3.16::el9\"],\"versions\":[{\"version\":\"1779204086\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"satellite/iop-vmaas-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6.18::el9\"],\"versions\":[{\"version\":\"1778082595\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/client-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1776339099\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.11::el9\"],\"versions\":[{\"version\":\"1776966691\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.12::el9\"],\"versions\":[{\"version\":\"1776959849\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.13::el9\"],\"versions\":[{\"version\":\"1776197785\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.14::el9\"],\"versions\":[{\"version\":\"1776199398\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.15::el9\"],\"versions\":[{\"version\":\"1775672762\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Assisted Installer for Red Hat OpenShift Container Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhai/assisted-installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:assisted_installer:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"cert-manager Operator for Red Hat OpenShift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cert-manager/jetstack-cert-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Compliance Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-compliance-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_compliance_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"build-of-trustee/trustee-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-sandboxed-containers/osc-monitor-rhel9\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cryostat/cryostat-storage-rhel9\",\"cpes\":[\"cpe:/a:redhat:cryostat:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler operator for Red Hat Openshift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Deployment Validation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dvo/deployment-validation-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:deployment_validator_operator\"]},{\"vendor\":\"Red Hat\",\"product\":\"ExternalDNS Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"edo/external-dns-rhel8\",\"cpes\":[\"cpe:/a:redhat:ext_dns_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"ExternalDNS Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"edo/external-dns-rhel9\",\"cpes\":[\"cpe:/a:redhat:ext_dns_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"External Secrets Operator for Red Hat OpenShift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"external-secrets-operator/external-secrets-rhel9\",\"cpes\":[\"cpe:/a:redhat:external_secrets_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fence Agents Remediation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/fence-agents-remediation-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_far:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"File Integrity Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-compliance-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_file_integrity_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Gatekeeper 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gatekeeper/gatekeeper-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:gatekeeper:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/logging-loki-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/lvms-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/topolvm-rhel8\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/topolvm-rhel9\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Machine Deletion Remediation Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/machine-deletion-remediation-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_mdr:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Applications 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"mta/mta-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_applications:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"mirror registry for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift/mirror-registry-rhel8\",\"cpes\":[\"cpe:/a:redhat:mirror_registry:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"mirror registry for Red Hat OpenShift 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift/mirror-registry-rhel8\",\"cpes\":[\"cpe:/a:redhat:mirror_registry:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/discovery-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"network-observability/network-observability-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-healthcheck-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"helm\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocp-tools-4/jenkins-agent-base-rhel9\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocp-tools-4/jenkins-rhel8\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines-client\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kn-workflow-plugin\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-plugin-event-sender-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-clients\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-golang-builder-container\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-golang-builder-container\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Power monitoring for Red Hat OpenShift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-power-monitoring/kepler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_power_monitoring\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/3scale-rhel7-operator\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/3scale-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp26/3scale-operator\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp26/operator\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/platform-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy-openssl30\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy-openssl32\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.11-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.11-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.12-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.12-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3x-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apache Camel - HawtIO 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"hawtio-operator-container\",\"cpes\":[\"cpe:/a:redhat:apache_camel_hawtio:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Certification Program for Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat-certification-preflight\",\"cpes\":[\"cpe:/a:redhat:certifications:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Connectivity Link 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcl-1/coredns-rhel9\",\"cpes\":[\"cpe:/a:redhat:connectivity_link:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhdh/rhdh-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:rhdh:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhem/flightctl-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"go-fdo-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"go-fdo-server\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel10/bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"toolbox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee-guest-components\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"host-metering\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc-worker-script\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/conmon\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/containernetworking-plugins\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/runc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/toolbox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"go-toolset:rhel8/golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"weldr-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"containernetworking-plugins\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel9/bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"runc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"toolbox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee-guest-components\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"weldr-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Cluster Manager CLI\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocm-cli-clients/ocm-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon-rs\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"containernetworking-plugins\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cri-o\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cri-tools\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-prometheus-promu\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kata-containers\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"microshift\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/frr-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/frr-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-sdn-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-clients\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-golang-builder-container\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-kuryr\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-aws-ecr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-azure-acr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-gcp-gcr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"runc\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift for Windows Containers\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4-wincw/windows-machine-config-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:windows_machine_config\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift on AWS\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rosa\",\"cpes\":[\"cpe:/a:redhat:openshift_service_on_aws:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/virt-api\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/virt-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kubevirt\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-golang-builder-container\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-infrawatch-apputils\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosp-rhel8/osp-director-agent\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"collectd-libpod-stats\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-infrawatch-apputils\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosp-rhel9/osp-director-agent\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoso-operators/sg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-builder-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite:el8/yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skupper-cli\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skupper-cli\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Security Profiles Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-selinuxd-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_security_profiles_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Service Telemetry Framework 1.5\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"stf/sg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:stf:1.5\"]},{\"vendor\":\"Red Hat\",\"product\":\"streams for Apache Kafka 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-danielqsj-kafka_exporter\",\"cpes\":[\"cpe:/a:redhat:amq_streams:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-03-10T13:32:09.097820Z\",\"id\":\"CVE-2026-27137\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-295\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-295\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:golang:go:1.26.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A40FE3CB-0D03-462B-8A19-4DF1920ABE82\"}]}]}],\"references\":[{\"url\":\"https://go.dev/cl/752182\",\"source\":\"security@golang.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://go.dev/issue/77952\",\"source\":\"security@golang.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk\",\"source\":\"security@golang.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://pkg.go.dev/vuln/GO-2026-4599\",\"source\":\"security@golang.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10125\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10158\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10169\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10175\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10184\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10225\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10250\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10929\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11800\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13545\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:14879\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19022\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19049\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19132\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19181\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19375\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21769\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22347\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22423\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22450\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22714\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22862\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22937\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23228\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23345\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26568\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26585\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28038\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28047\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29854\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36796\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39810\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41019\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41928\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:5110\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54757\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:5549\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7291\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8151\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8167\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8337\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8338\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8842\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9052\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9385\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9697\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9698\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9699\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9872\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-27137\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2445345\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27137.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-08-20T12:07:41+00:00",
"cve": "CVE-2026-27137",
"id": "CVE-2026-27137",
"initial_release_date": "2026-03-06T21:28:13.748000+00:00",
"product_status:fixed": "360",
"product_status:known_affected": "132",
"product_status:known_not_affected": "1352",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27137.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "moderate",
"current_release_date": "2026-07-19T17:41:59Z",
"cve": "CVE-2026-27137",
"id": "CVE-2026-27137",
"initial_release_date": "2026-03-07T00:25:42Z",
"product_status:known_not_affected": "177",
"product_status:recommended": "159",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-27137",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-27137.json",
"version": "21"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"crypto/x509: Incorrect enforcement of email constraints in crypto/x509\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.1\", \"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.2.3-4.el10_1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"0:0.2.7-3.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc-worker-playbook\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.25.2-3.el10_1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"delve\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.2-2.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.9.27-6.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang-github-openprinting-ipp-usb\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:165.1-2.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:52.1-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"image-builder\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.2.3-4.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc-worker-playbook\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.2-1.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:165.1-2.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:52.1-1.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"image-builder\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"6:0.8.5-2.el9_6.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.2.1-1.1.el8ost\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"collectd-sensubility\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.3.23-22.el8ost\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"etcd\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.4.26-9.5.el9ost\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"etcd\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Services on OpenShift 18.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.1.1-18.0.20260602234716.a95ae05.el9ost\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang-github-openstack-k8s-operators-os-diff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.0 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.0.3-1.el9em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.1 for RHEL 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.1.3-1.el10em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.1 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.1.3-1.el9em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Builds for Red Hat OpenShift 1.6.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1774334066\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-waiters-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:devworkspace:0.40::el9\"], \"vendor\": \"Red Hat\", \"product\": \"DevWorkspace Operator 0.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776457293\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"devworkspace/devworkspace-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging for Red Hat OpenShift 6.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780051640\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift 6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781192891\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift 6.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776800087\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779210675\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.4.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779838819\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.6.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780320809\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779809598\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-velero-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779808027\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-velero-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1774085848\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/subctl-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777391542\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ansible-automation-platform-26/receptor-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.26.2-1.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang1-26-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.0.2-1776288486\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit 1.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783914276\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhmtc/openshift-migration-registry-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat multicluster global hub 1.5.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1773650627\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1779828691\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:2.25::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 2.25\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776773362\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.7.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776846936\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-waiters-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3.27::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces 3.27\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776789889\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"devspaces/udi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.9.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776435680\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/tempo-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1.18::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps 1.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776755965\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-gitops-1/dex-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1.19::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps 1.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776767162\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-gitops-1/dex-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps 1.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776773421\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-gitops-1/dex-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779204086\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778082595\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"satellite/iop-vmaas-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776339099\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/client-server-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776966691\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.12::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776959849\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776197785\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776199398\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1775672762\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:assisted_installer:2\"], \"vendor\": \"Red Hat\", \"product\": \"Assisted Installer for Red Hat OpenShift Container Platform 2\", \"packageName\": \"rhai/assisted-installer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cert_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"cert-manager Operator for Red Hat OpenShift\", \"packageName\": \"cert-manager/jetstack-cert-manager-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_compliance_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"Compliance Operator\", \"packageName\": \"compliance/openshift-compliance-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"build-of-trustee/trustee-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"openshift-sandboxed-containers/osc-monitor-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cryostat:4\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4\", \"packageName\": \"cryostat/cryostat-storage-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"], \"vendor\": \"Red Hat\", \"product\": \"Custom Metric Autoscaler operator for Red Hat Openshift\", \"packageName\": \"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:deployment_validator_operator\"], \"vendor\": \"Red Hat\", \"product\": \"Deployment Validation Operator\", \"packageName\": \"dvo/deployment-validation-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ext_dns_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"ExternalDNS Operator\", \"packageName\": \"edo/external-dns-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ext_dns_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"ExternalDNS Operator\", \"packageName\": \"edo/external-dns-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:external_secrets_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"External Secrets Operator for Red Hat OpenShift\", \"packageName\": \"external-secrets-operator/external-secrets-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_far:0\"], \"vendor\": \"Red Hat\", \"product\": \"Fence Agents Remediation Operator\", \"packageName\": \"workload-availability/fence-agents-remediation-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_file_integrity_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"File Integrity Operator\", \"packageName\": \"compliance/openshift-compliance-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:gatekeeper:3\"], \"vendor\": \"Red Hat\", \"product\": \"Gatekeeper 3\", \"packageName\": \"gatekeeper/gatekeeper-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/logging-loki-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/lvms-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/topolvm-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/topolvm-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_mdr:0\"], \"vendor\": \"Red Hat\", \"product\": \"Machine Deletion Remediation Operator\", \"packageName\": \"workload-availability/machine-deletion-remediation-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_applications:8\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Applications 8\", \"packageName\": \"mta/mta-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:mirror_registry:1\"], \"vendor\": \"Red Hat\", \"product\": \"mirror registry for Red Hat OpenShift\", \"packageName\": \"openshift/mirror-registry-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:mirror_registry:2\"], \"vendor\": \"Red Hat\", \"product\": \"mirror registry for Red Hat OpenShift 2\", \"packageName\": \"openshift/mirror-registry-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/discovery-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability Operator\", \"packageName\": \"network-observability/network-observability-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-healthcheck-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"helm\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"ocp-tools-4/jenkins-agent-base-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"ocp-tools-4/jenkins-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"kn-workflow-plugin\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-plugin-event-sender-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-clients\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-golang-builder-container\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/kiali-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-golang-builder-container\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_power_monitoring\"], \"vendor\": \"Red Hat\", \"product\": \"Power monitoring for Red Hat OpenShift\", \"packageName\": \"openshift-power-monitoring/kepler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/3scale-rhel7-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/3scale-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp26/3scale-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp26/operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4\", \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform/platform-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy-openssl30\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy-openssl32\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.11-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.11-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.12-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.12-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3x-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:apache_camel_hawtio:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apache Camel - HawtIO 4\", \"packageName\": \"hawtio-operator-container\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:certifications:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Certification Program for Red Hat Enterprise Linux 9\", \"packageName\": \"redhat-certification-preflight\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:connectivity_link:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Connectivity Link 1\", \"packageName\": \"rhcl-1/coredns-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub\", \"packageName\": \"rhdh/rhdh-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1\", \"packageName\": \"rhem/flightctl-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"butane\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"git-lfs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"go-fdo-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"go-fdo-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhel10/bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"toolbox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"trustee\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"trustee-guest-components\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"yggdrasil\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"host-metering\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"rhc-worker-script\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/runc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/toolbox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"git-lfs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"go-toolset:rhel8/golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"weldr-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"butane\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"git-lfs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhel9/bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"runc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"toolbox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"trustee-guest-components\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"weldr-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Cluster Manager CLI\", \"packageName\": \"ocm-cli-clients/ocm-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"butane\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"conmon-rs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"cri-o\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"cri-tools\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"golang-github-prometheus-promu\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"kata-containers\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"microshift\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/frr-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/frr-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-sdn-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift-clients\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift-golang-builder-container\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift-kuryr\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-aws-ecr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-azure-acr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-gcp-gcr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"runc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:windows_machine_config\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift for Windows Containers\", \"packageName\": \"openshift4-wincw/windows-machine-config-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_service_on_aws:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift on AWS\", \"packageName\": \"rosa\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/virt-api\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/virt-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"kubevirt\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"openshift-golang-builder-container\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"golang-github-infrawatch-apputils\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"rhosp-rhel8/osp-director-agent\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"collectd-libpod-stats\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"golang-github-infrawatch-apputils\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"rhosp-rhel9/osp-director-agent\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"packageName\": \"rhoso-operators/sg-core-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-builder-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite:el8/yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 1\", \"packageName\": \"skupper-cli\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 2\", \"packageName\": \"skupper-cli\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_security_profiles_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"Security Profiles Operator\", \"packageName\": \"compliance/openshift-selinuxd-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:stf:1.5\"], \"vendor\": \"Red Hat\", \"product\": \"Service Telemetry Framework 1.5\", \"packageName\": \"stf/sg-core-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_streams:3\"], \"vendor\": \"Red Hat\", \"product\": \"streams for Apache Kafka 3\", \"packageName\": \"golang-github-danielqsj-kafka_exporter\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager - Tech Preview\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-03-06T22:01:38.859Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-03-06T21:28:13.748Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54757: Red Hat OpenStack Platform 16.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36796: RHEM 1.0 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28047: Red Hat OpenStack Platform 17.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39810: 9Base-RHOSO-TOOLS-18, Red Hat OpenStack Services on OpenShift 18.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10929: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8842: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10169: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19022: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22937: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19049: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22450: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19132: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28038: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19181: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23228: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22714: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:5549: Builds for Red Hat OpenShift 1.6.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9872: DevWorkspace Operator 0.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11800: Logging Subsystem for Red Hat OpenShift 6.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26585: Logging Subsystem for Red Hat OpenShift 6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22862: Logging for Red Hat OpenShift 6.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22423: Multicluster Global Hub 1.3.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22347: Multicluster Global Hub 1.4.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23345: Multicluster Global Hub 1.6.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29854: OpenShift API for Data Protection 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26568: OpenShift API for Data Protection 1.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8151: Red Hat Advanced Cluster Management for Kubernetes 2.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13545: Red Hat Ansible Automation Platform 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7291: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9052: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41928: Red Hat Migration Toolkit 1.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10184: Red Hat OpenShift AI 2.25\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10158: Red Hat OpenShift Builds 1.7.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10175: Red Hat OpenShift Dev Spaces 3.27\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9697: Red Hat OpenShift GitOps 1.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9698: Red Hat OpenShift GitOps 1.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9699: Red Hat OpenShift GitOps 1.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9385: Red Hat OpenShift distributed tracing 3.9.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19375: Red Hat Quay 3.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:14879: Red Hat Satellite 6.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10125: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10250: Red Hat Web Terminal 1.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10225: Red Hat Web Terminal 1.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8338: Red Hat Web Terminal 1.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8337: Red Hat Web Terminal 1.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8167: Red Hat Web Terminal 1.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:5110: Red Hat multicluster global hub 1.5.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21769: Red Hat multicluster global hub 1.5.1\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-03-06T21:28:13.748Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-27137\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2445345\", \"name\": \"RHBZ#2445345\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27137.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41019\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54757\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36796\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28047\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39810\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10929\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8842\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10169\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19022\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22937\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19049\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22450\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19132\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28038\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19181\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23228\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22714\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:5549\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9872\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11800\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26585\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22862\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22423\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22347\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23345\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29854\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26568\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8151\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13545\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7291\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9052\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41928\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10184\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10158\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10175\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9697\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9698\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9699\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9385\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19375\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:14879\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10125\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10250\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10225\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8338\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8337\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8167\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:5110\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21769\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-295\", \"description\": \"Improper Certificate Validation\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-08-20T12:31:59.833Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-27137\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-03-10T13:32:09.097820Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-03-10T13:32:37.164Z\"}}], \"cna\": {\"title\": \"Incorrect enforcement of email constraints in crypto/x509\", \"credits\": [{\"lang\": \"en\", \"value\": \"Jakub Ciolek\"}], \"affected\": [{\"vendor\": \"Go standard library\", \"product\": \"crypto/x509\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.26.0-0\", \"lessThan\": \"1.26.1\", \"versionType\": \"semver\"}], \"packageName\": \"crypto/x509\", \"collectionURL\": \"https://pkg.go.dev\", \"defaultStatus\": \"unaffected\", \"programRoutines\": [{\"name\": \"newEmailConstraints\"}, {\"name\": \"emailConstraints.query\"}, {\"name\": \"checkConstraints\"}, {\"name\": \"checkChainConstraints\"}, {\"name\": \"parseMailboxes\"}, {\"name\": \"Certificate.Verify\"}]}], \"references\": [{\"url\": \"https://go.dev/cl/752182\"}, {\"url\": \"https://go.dev/issue/77952\"}, {\"url\": \"https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk\"}, {\"url\": \"https://pkg.go.dev/vuln/GO-2026-4599\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"CWE-295: Improper Certificate Validation\"}]}], \"providerMetadata\": {\"orgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"shortName\": \"Go\", \"dateUpdated\": \"2026-03-08T05:56:20.771Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-27137\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-20T12:31:59.833Z\", \"dateReserved\": \"2026-02-17T19:57:28.434Z\", \"assignerOrgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"datePublished\": \"2026-03-06T21:28:13.748Z\", \"assignerShortName\": \"Go\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:28047
Vulnerability from csaf_redhat - Published: 2026-06-22 21:01 - Updated: 2026-08-21 13:44Summary
Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (etcd) security update
Severity
Important
Notes
Topic: An update for etcd is now available for Red Hat OpenStack Platform 17.1
(Wallaby).
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
Details: etcd is a highly-available key value store for shared configuration.
Security Fix(es):
* net/url: Memory exhaustion in query parameter parsing in net/url
(CVE-2025-61726)
* golang: Denial of Service due to excessive resource consumption via
crafted certificate (CVE-2025-61729)
* Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)
* Incorrect enforcement of email constraints in crypto/x509
(CVE-2026-27137)
* crypto/tls: golang: Go: Denial of Service vulnerability in certificate
chain building (CVE-2026-32280)
* golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update
messages (CVE-2026-32283)
* google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to
improper HTTP/2 path validation (CVE-2026-33186)
* golang: Go crypto/x509: Certificate validation bypass due to incorrect
DNS constraint application (CVE-2026-33810)
* crypto/tls: Incorrect certificate validation during TLS session
resumption (CVE-2025-68121)
* internal/syscall/unix: Root.Chmod can follow symlinks out of the root
(CVE-2026-32282)
* etcd: Authorization bypass allows information disclosure and denial of
service (CVE-2026-33413)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in etcd, a distributed key-value store. Unauthorized users can bypass authentication or authorization checks when the gRPC API is exposed to untrusted clients. This allows them to access sensitive cluster topology information, disrupt operations through alarms, interfere with lease management, and trigger data compaction, leading to permanent data loss and disruption of critical workflows. This vulnerability can result in information disclosure and denial of service.
7.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
90 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for etcd is now available for Red Hat OpenStack Platform 17.1\n(Wallaby).\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "etcd is a highly-available key value store for shared configuration.\n\nSecurity Fix(es):\n\n* net/url: Memory exhaustion in query parameter parsing in net/url\n(CVE-2025-61726)\n\n* golang: Denial of Service due to excessive resource consumption via\ncrafted certificate (CVE-2025-61729)\n\n* Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* Incorrect enforcement of email constraints in crypto/x509\n(CVE-2026-27137)\n\n* crypto/tls: golang: Go: Denial of Service vulnerability in certificate\nchain building (CVE-2026-32280)\n\n* golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update\nmessages (CVE-2026-32283)\n\n* google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to\nimproper HTTP/2 path validation (CVE-2026-33186)\n\n* golang: Go crypto/x509: Certificate validation bypass due to incorrect\nDNS constraint application (CVE-2026-33810)\n\n* crypto/tls: Incorrect certificate validation during TLS session\nresumption (CVE-2025-68121)\n\n* internal/syscall/unix: Root.Chmod can follow symlinks out of the root\n(CVE-2026-32282)\n\n* etcd: Authorization bypass allows information disclosure and denial of\nservice (CVE-2026-33413)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:28047",
"url": "https://access.redhat.com/errata/RHSA-2026:28047"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "2451728",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451728"
},
{
"category": "external",
"summary": "2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28047.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (etcd) security update",
"tracking": {
"current_release_date": "2026-08-21T13:44:20+00:00",
"generator": {
"date": "2026-08-21T13:44:20+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:28047",
"initial_release_date": "2026-06-22T21:01:08+00:00",
"revision_history": [
{
"date": "2026-06-22T21:01:08+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-22T21:01:08+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-21T13:44:20+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 17.1",
"product": {
"name": "Red Hat OpenStack Platform 17.1",
"product_id": "9Base-RHOS-17.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:17.1::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "etcd-0:3.4.26-9.5.el9ost.src",
"product": {
"name": "etcd-0:3.4.26-9.5.el9ost.src",
"product_id": "etcd-0:3.4.26-9.5.el9ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/etcd@3.4.26-9.5.el9ost?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "etcd-0:3.4.26-9.5.el9ost.x86_64",
"product": {
"name": "etcd-0:3.4.26-9.5.el9ost.x86_64",
"product_id": "etcd-0:3.4.26-9.5.el9ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/etcd@3.4.26-9.5.el9ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64",
"product": {
"name": "etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64",
"product_id": "etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/etcd-debugsource@3.4.26-9.5.el9ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"product": {
"name": "etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"product_id": "etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/etcd-debuginfo@3.4.26-9.5.el9ost?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-0:3.4.26-9.5.el9ost.src as a component of Red Hat OpenStack Platform 17.1",
"product_id": "9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src"
},
"product_reference": "etcd-0:3.4.26-9.5.el9ost.src",
"relates_to_product_reference": "9Base-RHOS-17.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-0:3.4.26-9.5.el9ost.x86_64 as a component of Red Hat OpenStack Platform 17.1",
"product_id": "9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64"
},
"product_reference": "etcd-0:3.4.26-9.5.el9ost.x86_64",
"relates_to_product_reference": "9Base-RHOS-17.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64 as a component of Red Hat OpenStack Platform 17.1",
"product_id": "9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64"
},
"product_reference": "etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"relates_to_product_reference": "9Base-RHOS-17.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64 as a component of Red Hat OpenStack Platform 17.1",
"product_id": "9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
},
"product_reference": "etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64",
"relates_to_product_reference": "9Base-RHOS-17.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T21:01:08+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28047"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T21:01:08+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28047"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T21:01:08+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28047"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T21:01:08+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28047"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T21:01:08+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28047"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T21:01:08+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28047"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T21:01:08+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28047"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T21:01:08+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28047"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T21:01:08+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28047"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33413",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"discovery_date": "2026-03-26T14:03:01.896580+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451728"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in etcd, a distributed key-value store. Unauthorized users can bypass authentication or authorization checks when the gRPC API is exposed to untrusted clients. This allows them to access sensitive cluster topology information, disrupt operations through alarms, interfere with lease management, and trigger data compaction, leading to permanent data loss and disruption of critical workflows. This vulnerability can result in information disclosure and denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "etcd: etcd: Authorization bypass allows information disclosure and denial of service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw in etcd allows unauthorized users to bypass authentication or authorization checks when the gRPC API is exposed to untrusted clients and etcd\u0027s built-in authentication is enabled. This can lead to information disclosure and denial of service. Typical Red Hat OpenShift Container Platform and Kubernetes deployments are not affected, as the Kubernetes API server handles authentication and authorization independently of etcd\u0027s internal mechanisms.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33413"
},
{
"category": "external",
"summary": "RHBZ#2451728",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451728"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33413",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33413"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33413",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33413"
},
{
"category": "external",
"summary": "https://github.com/etcd-io/etcd/security/advisories/GHSA-q8m4-xhhv-38mg",
"url": "https://github.com/etcd-io/etcd/security/advisories/GHSA-q8m4-xhhv-38mg"
}
],
"release_date": "2026-03-26T13:36:10.919000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T21:01:08+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28047"
},
{
"category": "workaround",
"details": "Restrict network access to etcd server ports to ensure only trusted components can establish connections. Implement strong client identity at the transport layer, such as mTLS, with tightly scoped client certificate distribution. This will limit unauthorized access to etcd functions.",
"product_ids": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "etcd: etcd: Authorization bypass allows information disclosure and denial of service"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-22T21:01:08+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:28047"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.src",
"9Base-RHOS-17.1:etcd-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debuginfo-0:3.4.26-9.5.el9ost.x86_64",
"9Base-RHOS-17.1:etcd-debugsource-0:3.4.26-9.5.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
}
]
}
RHSA-2026:29854
Vulnerability from csaf_redhat - Published: 2026-06-25 08:18 - Updated: 2026-08-21 13:44Summary
Red Hat Security Advisory: Red Hat OpenShift API for Data Protection
Severity
Important
Notes
Topic: A new version of OpenShift API for Data Protection (OADP) is now available.
Details: OpenShift API for Data Protection (OADP) enables you to back up and restore
application resources, persistent volume data, and internal container
images to external backup storage. OADP enables both file system-based and
snapshot-based backups for persistent volumes.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x | — |
Vendor Fix
fix
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x | — |
Threats
Impact
Moderate
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x | — |
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x | — |
Vendor Fix
fix
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x | — |
Vendor Fix
fix
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x | — |
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x | — |
Workaround
|
Threats
Impact
Important
References
90 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new version of OpenShift API for Data Protection (OADP) is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenShift API for Data Protection (OADP) enables you to back up and restore\napplication resources, persistent volume data, and internal container\nimages to external backup storage. OADP enables both file system-based and\nsnapshot-based backups for persistent volumes.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:29854",
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33747",
"url": "https://access.redhat.com/security/cve/CVE-2026-33747"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33748",
"url": "https://access.redhat.com/security/cve/CVE-2026-33748"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore",
"url": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_29854.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift API for Data Protection",
"tracking": {
"current_release_date": "2026-08-21T13:44:26+00:00",
"generator": {
"date": "2026-08-21T13:44:26+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:29854",
"initial_release_date": "2026-06-25T08:18:45+00:00",
"revision_history": [
{
"date": "2026-06-25T08:18:45+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-15T05:55:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-21T13:44:26+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "OpenShift API for Data Protection 1.4",
"product": {
"name": "OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_api_data_protection:1.4::el9"
}
}
}
],
"category": "product_family",
"name": "OpenShift API for Data Protection"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3Aad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1779243307"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3A4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1779770049"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3A143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1779847451"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"product_id": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-operator-bundle@sha256%3Afbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-operator-bundle\u0026tag=1779848257"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3A6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1779809598"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1779243793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3Aca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1779243113"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3Ae213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1779243915"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3A3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1779243074"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3Ad5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1779243128"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3A605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1779809597"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1779243307"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3Ab8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1779770049"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3Ab6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1779847451"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3Abcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1779809598"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3Aaabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1779243793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3Aeacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1779243113"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3A5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1779243915"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3Af83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1779243074"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3Af12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1779243128"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3A6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1779809597"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1779243307"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3Ab3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1779770049"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3Acf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1779847451"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3Ad437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1779809598"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3Acaff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1779243793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3Afb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1779243113"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3Adb5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1779243915"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3Aa080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1779243074"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3Afc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1779243128"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3Ae30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1779809597"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3Afa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1779243307"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3Ad766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1779770049"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3A92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1779847451"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3Ac720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1779809598"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1779243793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1779243113"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3A85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1779243915"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3A356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1779243074"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3Aed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1779243128"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3A4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1779809597"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64 as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x as a component of OpenShift API for Data Protection 1.4",
"product_id": "OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-25T08:18:45+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-25T08:18:45+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-25T08:18:45+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-25T08:18:45+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-25T08:18:45+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-25T08:18:45+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-25T08:18:45+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33747",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-27T02:01:29.921765+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452076"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33747"
},
{
"category": "external",
"summary": "RHBZ#2452076",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452076"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33747",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33747"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
"url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj"
}
],
"release_date": "2026-03-27T00:49:06.165000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-25T08:18:45+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, avoid using untrusted BuildKit frontends. Restrict the use of custom BuildKit frontends to only those from verified and trusted sources. Do not specify untrusted frontends via `#syntax` or `--build-arg BUILDKIT_SYNTAX`.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend"
},
{
"cve": "CVE-2026-33748",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-27T15:02:00.107493+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452271"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33748"
},
{
"category": "external",
"summary": "RHBZ#2452271",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452271"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33748",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33748"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748"
},
{
"category": "external",
"summary": "https://docs.docker.com/build/concepts/context/#url-fragments",
"url": "https://docs.docker.com/build/concepts/context/#url-fragments"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
"url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg"
}
],
"release_date": "2026-03-27T14:00:21.200000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-25T08:18:45+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-25T08:18:45+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-25T08:18:45+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:17af493f7fee34d568b9d5619adfd7e087c28a8038e511d254a3999c37c58ef8_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:374d9e4e00b261c35289aee21a1d890b516d0fb83078b3b52817f5c5385aa084_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:ad53c993e7afabb98c66f25e8093851fbca592f030ed9c6e32056492958162d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:fa2b4d9faf775d51f0ee2b8db7081b982a1e50172a004307e80bd03ca0fe3d1d_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4490beeb9fdb719cc93232301a83637a1b0ce702bee0fd910ccd3cd4c11e50d0_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b3331c129826252d0b92fc27246597482bbe75e8eecea9bfa64d56be490c8d63_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:b8975f3cb3ab52842046e7a060e770de5ab3df539410825f8028db402746dc49_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:d766b160ca81c2b7ad6b6d5c6915b3a92c6bb673cc9a8d06e9092b9760967d85_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-operator-bundle@sha256:fbb56ee11f594426137e348722879c5e82dc54f95038166a1b4c4f4ee81e894d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:143ab7980c82934a76ad7bd868132b74701c5551832b28791848527ce8b03c20_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:92c0fefeea6b853dbfff5ec75e39d1fcda373dbf7c57970800b0b37178031238_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b6eac0b65e002fd41dde04e5c674b5993ea6369524e8c0140e916aba485053d4_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:cf465717f1180127489d07808818760d194e04e155d6eb8eff2724505fd0f6cd_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:30831d901c1636053558d0ac31de96e2580c30c85d9084b5d93080f5e96eb66c_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:ca9f1af1a243a4dd74f75345e5e525393f9ba9fb797fd970ae2280a39f57b772_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:eacd5a9c1c16fb73e5b0097ee93e82bac7950dd2753a7d169a1a24547b6174ad_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:fb527f9ac9fa160a71a503a3eb82aa3f9ef1585a4bcdead6f035185b91c05334_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:5d98839c46b3c0263b0eb19b4d06d46fa65773f8244cdaabeed873f123995576_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:85b050dd45621a34f14dd6b6ab867dc4ac84964c02523ee865480713823dd390_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:db5d67e04f26424081a96ce90ca054dd4fc99b638c93a272a7af7af85ec4c0a0_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:e213bf8473c54562605ee9f6e13399a7cff1ea2f50f037b909d8a9ab59575964_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:356fafc9176aa3386278ee1f719133b1359e8a5f2f5de91c8ca9412a991f9b55_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:3a5a8bc8aadd7779a08128cfb59f50e1991cc0251c2edc9b0f953cdad195ae0b_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:a080e8ffa4ee1f3c99bb4df919bbfb29def73095a0bfd7a839e2091217d68e28_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:f83df5c7657049f90eaee42cc5dead19fcb48c6adeaa2f9812e5420f0aa00d5d_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d5c683e4252c17d06bf3945f3af4c80ef42f856e9dd6c1a6d08a4e54babfedac_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:ed0a47c5e0320e84d995d99236158cf686b9c2443f6eaa5e47cb3e69b01c23e2_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:f12b8e98ebdf05f6f91b1eed3ff3dbbedefaac55fa8fc41943ff91faed46bf32_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:fc597c5c4c62c2d87fd68e884df4c9d7634898dd7579e1d825daa2fd08ea35b4_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:561984526adccb2f793cf335cbe3b8c954ed541d603a78eebbe83a0b742a6c9b_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:9bd9523592fec802988506a00eb9206494b2ad49ecf7e72cb3f67b84fce5137d_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:aabafbb687cfbfc178e171ba48ba1f593182fda375ff0638ad91ff719b8ad752_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:caff3cccd0562e5f598bd42e23749573ab786d1f86d0719d3e2c2b9531ce9511_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4c726cad3805b7831660a4273164105fa17a5e1242b7bd4120faaaeec9c91fae_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:605cc1c7e8c508dd82090d9d30797ffc1f6b6e93b3f693ae6b9a2824a4d6a637_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:6ef122cf6d51b30354a1dbad28f3a46111548b0f6c8a832f9efa6f60626b6ce3_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e30fbab6b9dc60219d6af7ac91698a12081a2e0259fe77655c56d70829c62dd9_s390x",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6f7f55658d72120eb8e1193b8f7d99f33b9c80fe7b176801dbcb8879504fd1ec_amd64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:bcfc9642e7af2b2be0ce8a17b9c7d34fb5b4220bf4990400fcdb3741ebc742a5_arm64",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c720a5c9d7043e4db3242fadb0ce9b019f4d11b954319a4b09cb452c3b494f31_ppc64le",
"OpenShift API for Data Protection 1.4:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:d437cb8613dc87511b03a3f1ea4467b28e0100ce6b8b08d3efce95e12715201a_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
}
]
}
RHSA-2026:36796
Vulnerability from csaf_redhat - Published: 2026-07-08 15:52 - Updated: 2026-08-21 13:44Summary
Red Hat Security Advisory: Red Hat Edge Manager Version 1.0.3 Security Update
Severity
Important
Notes
Topic: Red Hat Edge Manager Version 1.0.3 Security Update
Details: Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused
management of edge devices and applications. It supports image-mode RHEL and
container workloads that run on Podman/Docker or Kubernetes.
RHEM is now available as a standalone feature, providing greater flexibility for
edge deployments. In addition to the standalone version, RHEM continues to be
offered as a plugin for the following platforms:
Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge
devices.
Red Hat Ansible Automation Platform (AAP): Integrates edge management with
Ansible automation.
This integration enables organizations to optimize the management and
orchestration of their fleets of edge devices; whether its thousands of
dispersed retail point-of-sale systems or industrial machinery on remote factory
floors.
Value for customers and partners:
* This solution not only helps customers manage thousands of devices but helps
scale operations.
* To manage large-scale deployments, customers need to be able to integrate with
their existing management systems, support remote configuration and over-the-air
updates, and collect telemetry data for advanced analytics.
* Red Hat Edge Manager offers a simple and security-focused lifecycle
management, from onboarding to decommissioning of edge devices.
This complete end-to-end solution empowers organizations to gain the most value
from the fleets of devices that generate data, all from a centralized location.
Security fixes:
* golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)
* golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830)
* golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)
* golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions (CVE-2026-39828)
* golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (CVE-2026-46595)
* golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832)
* golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (CVE-2026-42508)
* golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
* Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)
* Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810)
* Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)
* Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)
* Go crypto/x509: Incorrect enforcement of email constraints (CVE-2026-27137)
* Go net/url: Incorrect parsing of IPv6 host literals (CVE-2026-25679)
* golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
* github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33815)
* github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33816)
* gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)
* Prometheus: Information disclosure of Azure OAuth client secret via config API (CVE-2026-42151)
* Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint (CVE-2026-42154)
* Root.Chmod can follow symlinks out of the root (CVE-2026-32282)
* Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code (CVE-2026-35469)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.
8.3 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.
8.3 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.
6.5 (Medium)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
References
190 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Edge Manager Version 1.0.3 Security Update",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused\nmanagement of edge devices and applications. It supports image-mode RHEL and\ncontainer workloads that run on Podman/Docker or Kubernetes.\n\nRHEM is now available as a standalone feature, providing greater flexibility for\nedge deployments. In addition to the standalone version, RHEM continues to be\noffered as a plugin for the following platforms:\n\nRed Hat Advanced Cluster Management (RHACM): Extends fleet management to edge\ndevices.\nRed Hat Ansible Automation Platform (AAP): Integrates edge management with\nAnsible automation.\n\nThis integration enables organizations to optimize the management and\norchestration of their fleets of edge devices; whether its thousands of\ndispersed retail point-of-sale systems or industrial machinery on remote factory\nfloors.\n\nValue for customers and partners:\n\n* This solution not only helps customers manage thousands of devices but helps\nscale operations.\n* To manage large-scale deployments, customers need to be able to integrate with\ntheir existing management systems, support remote configuration and over-the-air\nupdates, and collect telemetry data for advanced analytics.\n* Red Hat Edge Manager offers a simple and security-focused lifecycle\nmanagement, from onboarding to decommissioning of edge devices.\n\nThis complete end-to-end solution empowers organizations to gain the most value\nfrom the fleets of devices that generate data, all from a centralized location.\n\nSecurity fixes:\n\n* golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)\n* golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830)\n* golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)\n* golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions (CVE-2026-39828)\n* golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (CVE-2026-46595)\n* golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832)\n* golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (CVE-2026-42508)\n* golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n* Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n* Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)\n* Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810)\n* Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)\n* Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)\n* Go crypto/x509: Incorrect enforcement of email constraints (CVE-2026-27137)\n* Go net/url: Incorrect parsing of IPv6 host literals (CVE-2026-25679)\n* golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)\n* github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33815)\n* github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33816)\n* gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)\n* Prometheus: Information disclosure of Azure OAuth client secret via config API (CVE-2026-42151)\n* Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint (CVE-2026-42154)\n* Root.Chmod can follow symlinks out of the root (CVE-2026-32282)\n* Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code (CVE-2026-35469)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:36796",
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro",
"url": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro"
},
{
"category": "external",
"summary": "2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "2455972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455972"
},
{
"category": "external",
"summary": "2455975",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455975"
},
{
"category": "external",
"summary": "2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "2457729",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457729"
},
{
"category": "external",
"summary": "2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36796.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Edge Manager Version 1.0.3 Security Update",
"tracking": {
"current_release_date": "2026-08-21T13:44:55+00:00",
"generator": {
"date": "2026-08-21T13:44:55+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:36796",
"initial_release_date": "2026-07-08T15:52:29+00:00",
"revision_history": [
{
"date": "2026-07-08T15:52:29+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-08T15:52:29+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-21T13:44:55+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHEM 1.0 for RHEL 9",
"product": {
"name": "RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:edge_manager:1.0::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Edge Manager"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-0:1.0.3-1.el9em.src",
"product": {
"name": "flightctl-0:1.0.3-1.el9em.src",
"product_id": "flightctl-0:1.0.3-1.el9em.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl@1.0.3-1.el9em?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.0.3-1.el9em.x86_64",
"product": {
"name": "flightctl-agent-0:1.0.3-1.el9em.x86_64",
"product_id": "flightctl-agent-0:1.0.3-1.el9em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.0.3-1.el9em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.0.3-1.el9em.x86_64",
"product": {
"name": "flightctl-cli-0:1.0.3-1.el9em.x86_64",
"product_id": "flightctl-cli-0:1.0.3-1.el9em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.0.3-1.el9em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.0.3-1.el9em.x86_64",
"product": {
"name": "flightctl-observability-0:1.0.3-1.el9em.x86_64",
"product_id": "flightctl-observability-0:1.0.3-1.el9em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.0.3-1.el9em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.0.3-1.el9em.x86_64",
"product": {
"name": "flightctl-services-0:1.0.3-1.el9em.x86_64",
"product_id": "flightctl-services-0:1.0.3-1.el9em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.0.3-1.el9em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64",
"product": {
"name": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64",
"product_id": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-telemetry-gateway@1.0.3-1.el9em?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.0.3-1.el9em.s390x",
"product": {
"name": "flightctl-agent-0:1.0.3-1.el9em.s390x",
"product_id": "flightctl-agent-0:1.0.3-1.el9em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.0.3-1.el9em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.0.3-1.el9em.s390x",
"product": {
"name": "flightctl-cli-0:1.0.3-1.el9em.s390x",
"product_id": "flightctl-cli-0:1.0.3-1.el9em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.0.3-1.el9em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.0.3-1.el9em.s390x",
"product": {
"name": "flightctl-observability-0:1.0.3-1.el9em.s390x",
"product_id": "flightctl-observability-0:1.0.3-1.el9em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.0.3-1.el9em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.0.3-1.el9em.s390x",
"product": {
"name": "flightctl-services-0:1.0.3-1.el9em.s390x",
"product_id": "flightctl-services-0:1.0.3-1.el9em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.0.3-1.el9em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"product": {
"name": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"product_id": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-telemetry-gateway@1.0.3-1.el9em?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"product": {
"name": "flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"product_id": "flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.0.3-1.el9em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"product": {
"name": "flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"product_id": "flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.0.3-1.el9em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"product": {
"name": "flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"product_id": "flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.0.3-1.el9em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.0.3-1.el9em.ppc64le",
"product": {
"name": "flightctl-services-0:1.0.3-1.el9em.ppc64le",
"product_id": "flightctl-services-0:1.0.3-1.el9em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.0.3-1.el9em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"product": {
"name": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"product_id": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-telemetry-gateway@1.0.3-1.el9em?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.0.3-1.el9em.aarch64",
"product": {
"name": "flightctl-agent-0:1.0.3-1.el9em.aarch64",
"product_id": "flightctl-agent-0:1.0.3-1.el9em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.0.3-1.el9em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.0.3-1.el9em.aarch64",
"product": {
"name": "flightctl-cli-0:1.0.3-1.el9em.aarch64",
"product_id": "flightctl-cli-0:1.0.3-1.el9em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.0.3-1.el9em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.0.3-1.el9em.aarch64",
"product": {
"name": "flightctl-observability-0:1.0.3-1.el9em.aarch64",
"product_id": "flightctl-observability-0:1.0.3-1.el9em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.0.3-1.el9em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.0.3-1.el9em.aarch64",
"product": {
"name": "flightctl-services-0:1.0.3-1.el9em.aarch64",
"product_id": "flightctl-services-0:1.0.3-1.el9em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.0.3-1.el9em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"product": {
"name": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"product_id": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-telemetry-gateway@1.0.3-1.el9em?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-selinux-0:1.0.3-1.el9em.noarch",
"product": {
"name": "flightctl-selinux-0:1.0.3-1.el9em.noarch",
"product_id": "flightctl-selinux-0:1.0.3-1.el9em.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-selinux@1.0.3-1.el9em?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-0:1.0.3-1.el9em.src as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src"
},
"product_reference": "flightctl-0:1.0.3-1.el9em.src",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.0.3-1.el9em.aarch64 as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64"
},
"product_reference": "flightctl-agent-0:1.0.3-1.el9em.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.0.3-1.el9em.ppc64le as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le"
},
"product_reference": "flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.0.3-1.el9em.s390x as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x"
},
"product_reference": "flightctl-agent-0:1.0.3-1.el9em.s390x",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.0.3-1.el9em.x86_64 as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64"
},
"product_reference": "flightctl-agent-0:1.0.3-1.el9em.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.0.3-1.el9em.aarch64 as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64"
},
"product_reference": "flightctl-cli-0:1.0.3-1.el9em.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.0.3-1.el9em.ppc64le as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le"
},
"product_reference": "flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.0.3-1.el9em.s390x as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x"
},
"product_reference": "flightctl-cli-0:1.0.3-1.el9em.s390x",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.0.3-1.el9em.x86_64 as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64"
},
"product_reference": "flightctl-cli-0:1.0.3-1.el9em.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.0.3-1.el9em.aarch64 as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64"
},
"product_reference": "flightctl-observability-0:1.0.3-1.el9em.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.0.3-1.el9em.ppc64le as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le"
},
"product_reference": "flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.0.3-1.el9em.s390x as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x"
},
"product_reference": "flightctl-observability-0:1.0.3-1.el9em.s390x",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.0.3-1.el9em.x86_64 as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64"
},
"product_reference": "flightctl-observability-0:1.0.3-1.el9em.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-selinux-0:1.0.3-1.el9em.noarch as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
},
"product_reference": "flightctl-selinux-0:1.0.3-1.el9em.noarch",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.0.3-1.el9em.aarch64 as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64"
},
"product_reference": "flightctl-services-0:1.0.3-1.el9em.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.0.3-1.el9em.ppc64le as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le"
},
"product_reference": "flightctl-services-0:1.0.3-1.el9em.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.0.3-1.el9em.s390x as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x"
},
"product_reference": "flightctl-services-0:1.0.3-1.el9em.s390x",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.0.3-1.el9em.x86_64 as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64"
},
"product_reference": "flightctl-services-0:1.0.3-1.el9em.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64 as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64"
},
"product_reference": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le"
},
"product_reference": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x"
},
"product_reference": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"relates_to_product_reference": "9Base-RHEM-1.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64 as a component of RHEM 1.0 for RHEL 9",
"product_id": "9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
},
"product_reference": "flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33815",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-04-07T16:01:25.130006+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455975"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33815"
},
{
"category": "external",
"summary": "RHBZ#2455975",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455975"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33815",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33815"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4771",
"url": "https://pkg.go.dev/vuln/GO-2026-4771"
}
],
"release_date": "2026-04-07T15:19:24.344000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
},
{
"cve": "CVE-2026-33816",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-04-07T16:01:14.142946+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455972"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33816"
},
{
"category": "external",
"summary": "RHBZ#2455972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455972"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33816",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4772",
"url": "https://pkg.go.dev/vuln/GO-2026-4772"
}
],
"release_date": "2026-04-07T15:19:24.529000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
},
{
"cve": "CVE-2026-35469",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-13T03:52:35+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457729"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw affecting OpenShift Container Platform. An attacker with specific elevated cluster roles, such as those permitting pod port forwarding, execution, attachment, or node proxying, could exploit a vulnerability in the SPDY streaming code of Kubelet, CRI-O, and kube-apiserver, leading to unresponsiveness of these critical components.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35469"
},
{
"category": "external",
"summary": "RHBZ#2457729",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457729"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35469",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35469"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469"
}
],
"release_date": "2026-04-13T23:59:59+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "To mitigate this issue, review and restrict the assignment of Kubernetes cluster roles `pods/portforward (create)`, `pods/exec (create)`, `pods/attach (create)`, and `nodes/proxy (get/create)` to untrusted users or service accounts. Ensure that only authorized and necessary entities possess these permissions. Modifying RBAC policies can impact the functionality of applications and services that rely on these permissions; careful testing is recommended.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to the Prometheus remote read endpoint (/api/v1/read). Configure firewall rules or network policies to permit connections only from trusted internal networks or authorized clients. This action reduces the attack surface by limiting exposure to unauthenticated remote attackers. A service restart or reload may be required for the changes to take effect.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"known_not_affected": [
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T15:52:29+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.0",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/crypto/ssh release via updated golang or package rebuilds. Ensure SSH servers use supported public-key callback configurations with source-address validation as intended.",
"product_ids": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"9Base-RHEM-1.0:flightctl-0:1.0.3-1.el9em.src",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-agent-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-cli-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-observability-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-selinux-0:1.0.3-1.el9em.noarch",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-services-0:1.0.3-1.el9em.x86_64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.aarch64",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.ppc64le",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.s390x",
"9Base-RHEM-1.0:flightctl-telemetry-gateway-0:1.0.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:39810
Vulnerability from csaf_redhat - Published: 2026-07-15 09:55 - Updated: 2026-08-21 13:45Summary
Red Hat Security Advisory: Red Hat OpenStack Services on OpenShift 18.0 (golang-github-openstack-k8s-operators-os-diff) security update
Severity
Important
Notes
Topic: An update for golang-github-openstack-k8s-operators-os-diff is now
available for Red Hat OpenStack Services on OpenShift 18.0 (Antelope).
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
Details: Security Fix(es):
* net/url: Memory exhaustion in query parameter parsing in net/url
(CVE-2025-61726)
* golang: Denial of Service due to excessive resource consumption via
crafted certificate (CVE-2025-61729)
* Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)
* Incorrect enforcement of email constraints in crypto/x509
(CVE-2026-27137)
* crypto/tls: golang: Go: Denial of Service vulnerability in certificate
chain building (CVE-2026-32280)
* golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update
messages (CVE-2026-32283)
* golang: Go crypto/x509: Certificate validation bypass due to incorrect
DNS constraint application (CVE-2026-33810)
* golang: Go net package: Denial of Service via long CNAME response in
LookupCNAME (CVE-2026-33811)
* golang: Go crypto/x509: Denial of Service via inefficient certificate
chain validation (CVE-2026-32281)
* internal/syscall/unix: Root.Chmod can follow symlinks out of the root
(CVE-2026-32282)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
88 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for golang-github-openstack-k8s-operators-os-diff is now\navailable for Red Hat OpenStack Services on OpenShift 18.0 (Antelope).\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Security Fix(es):\n\n* net/url: Memory exhaustion in query parameter parsing in net/url\n(CVE-2025-61726)\n\n* golang: Denial of Service due to excessive resource consumption via\ncrafted certificate (CVE-2025-61729)\n\n* Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* Incorrect enforcement of email constraints in crypto/x509\n(CVE-2026-27137)\n\n* crypto/tls: golang: Go: Denial of Service vulnerability in certificate\nchain building (CVE-2026-32280)\n\n* golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update\nmessages (CVE-2026-32283)\n\n* golang: Go crypto/x509: Certificate validation bypass due to incorrect\nDNS constraint application (CVE-2026-33810)\n\n* golang: Go net package: Denial of Service via long CNAME response in\nLookupCNAME (CVE-2026-33811)\n\n* golang: Go crypto/x509: Denial of Service via inefficient certificate\nchain validation (CVE-2026-32281)\n\n* internal/syscall/unix: Root.Chmod can follow symlinks out of the root\n(CVE-2026-32282)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:39810",
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39810.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenStack Services on OpenShift 18.0 (golang-github-openstack-k8s-operators-os-diff) security update",
"tracking": {
"current_release_date": "2026-08-21T13:45:29+00:00",
"generator": {
"date": "2026-08-21T13:45:29+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:39810",
"initial_release_date": "2026-07-15T09:55:31+00:00",
"revision_history": [
{
"date": "2026-07-15T09:55:31+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-15T09:55:31+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-21T13:45:29+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Services on OpenShift 18.0",
"product": {
"name": "Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "9Base-RHOSO-18.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:18.0::el9"
}
}
},
{
"category": "product_name",
"name": "9Base-RHOSO-TOOLS-18",
"product": {
"name": "9Base-RHOSO-TOOLS-18",
"product_id": "9Base-RHOSO-TOOLS-18",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:18.0::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Services on OpenShift"
},
{
"branches": [
{
"category": "product_version",
"name": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"product": {
"name": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"product_id": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-github-openstack-k8s-operators-os-diff@0.1.1-18.0.20260602234716.a95ae05.el9ost?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"product": {
"name": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"product_id": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-github-openstack-k8s-operators-os-diff@0.1.1-18.0.20260602234716.a95ae05.el9ost?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src"
},
"product_reference": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"relates_to_product_reference": "9Base-RHOSO-18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 as a component of Red Hat OpenStack Services on OpenShift 18.0",
"product_id": "9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
},
"product_reference": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"relates_to_product_reference": "9Base-RHOSO-18.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src as a component of 9Base-RHOSO-TOOLS-18",
"product_id": "9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src"
},
"product_reference": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"relates_to_product_reference": "9Base-RHOSO-TOOLS-18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64 as a component of 9Base-RHOSO-TOOLS-18",
"product_id": "9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
},
"product_reference": "golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"relates_to_product_reference": "9Base-RHOSO-TOOLS-18"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T09:55:31+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T09:55:31+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T09:55:31+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T09:55:31+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T09:55:31+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T09:55:31+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T09:55:31+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T09:55:31+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T09:55:31+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T09:55:31+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-18.0:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.src",
"9Base-RHOSO-TOOLS-18:golang-github-openstack-k8s-operators-os-diff-0:0.1.1-18.0.20260602234716.a95ae05.el9ost.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
}
]
}
RHSA-2026:41019
Vulnerability from csaf_redhat - Published: 2026-07-16 14:35 - Updated: 2026-08-21 13:45Summary
Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update
Severity
Important
Notes
Topic: Red Hat Edge Manager Version 1.1.3 Security Update
Details: Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused
management of edge devices and applications. It supports image-mode RHEL and
container workloads that run on Podman/Docker or Kubernetes.
RHEM is now available as a standalone feature, providing greater flexibility for
edge deployments. In addition to the standalone version, RHEM continues to be
offered as a plugin for the following platforms:
Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge
devices.
Red Hat Ansible Automation Platform (AAP): Integrates edge management with
Ansible automation.
This integration enables organizations to optimize the management and
orchestration of their fleets of edge devices; whether its thousands of
dispersed retail point-of-sale systems or industrial machinery on remote factory
floors.
Value for customers and partners:
* This solution not only helps customers manage thousands of devices but helps
scale operations.
* To manage large-scale deployments, customers need to be able to integrate with
their existing management systems, support remote configuration and over-the-air
updates, and collect telemetry data for advanced analytics.
* Red Hat Edge Manager offers a simple and security-focused lifecycle
management, from onboarding to decommissioning of edge devices.
This complete end-to-end solution empowers organizations to gain the most value
from the fleets of devices that generate data, all from a centralized location.
Security fixes:
* golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)
* golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830)
* golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)
* golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions (CVE-2026-39828)
* golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (CVE-2026-46595)
* golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832)
* golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (CVE-2026-42508)
* golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
* Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)
* Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)
* Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)
* Go crypto/x509: Incorrect enforcement of email constraints (CVE-2026-27137)
* Go net/url: Incorrect parsing of IPv6 host literals (CVE-2026-25679)
* golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
* github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33816)
* github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33815)
* gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)
* Prometheus: Information disclosure of Azure OAuth client secret via config API (CVE-2026-42151)
* Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint (CVE-2026-42154)
* Root.Chmod can follow symlinks out of the root (CVE-2026-32282)
* Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code (CVE-2026-35469)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.
8.3 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.
8.3 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.
6.5 (Medium)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — | ||
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — | ||
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64 | — |
Workaround
|
Threats
Impact
Important
References
182 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Edge Manager Version 1.1.3 Security Update",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused\nmanagement of edge devices and applications. It supports image-mode RHEL and\ncontainer workloads that run on Podman/Docker or Kubernetes.\n\nRHEM is now available as a standalone feature, providing greater flexibility for\nedge deployments. In addition to the standalone version, RHEM continues to be\noffered as a plugin for the following platforms:\n\nRed Hat Advanced Cluster Management (RHACM): Extends fleet management to edge\ndevices.\nRed Hat Ansible Automation Platform (AAP): Integrates edge management with\nAnsible automation.\n\nThis integration enables organizations to optimize the management and\norchestration of their fleets of edge devices; whether its thousands of\ndispersed retail point-of-sale systems or industrial machinery on remote factory\nfloors.\n\nValue for customers and partners:\n\n* This solution not only helps customers manage thousands of devices but helps\nscale operations.\n* To manage large-scale deployments, customers need to be able to integrate with\ntheir existing management systems, support remote configuration and over-the-air\nupdates, and collect telemetry data for advanced analytics.\n* Red Hat Edge Manager offers a simple and security-focused lifecycle\nmanagement, from onboarding to decommissioning of edge devices.\n\nThis complete end-to-end solution empowers organizations to gain the most value\nfrom the fleets of devices that generate data, all from a centralized location.\n\nSecurity fixes:\n\n* golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)\n* golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830)\n* golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)\n* golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions (CVE-2026-39828)\n* golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (CVE-2026-46595)\n* golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832)\n* golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (CVE-2026-42508)\n* golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n* Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n* Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)\n* Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)\n* Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)\n* Go crypto/x509: Incorrect enforcement of email constraints (CVE-2026-27137)\n* Go net/url: Incorrect parsing of IPv6 host literals (CVE-2026-25679)\n* golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)\n* github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33816)\n* github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33815)\n* gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)\n* Prometheus: Information disclosure of Azure OAuth client secret via config API (CVE-2026-42151)\n* Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint (CVE-2026-42154)\n* Root.Chmod can follow symlinks out of the root (CVE-2026-32282)\n* Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code (CVE-2026-35469)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41019",
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1/html/installing_red_hat_edge_manager_on_red_hat_enterprise_linux/rhem-integrating-with-aap",
"url": "https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1/html/installing_red_hat_edge_manager_on_red_hat_enterprise_linux/rhem-integrating-with-aap"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1/html/installing_red_hat_edge_manager_on_red_hat_openshift_container_platform/edge-manager-install-rhem-ocp#edge-manager-verify-rhem-acm-console",
"url": "https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1/html/installing_red_hat_edge_manager_on_red_hat_openshift_container_platform/edge-manager-install-rhem-ocp#edge-manager-verify-rhem-acm-console"
},
{
"category": "external",
"summary": "2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "2455972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455972"
},
{
"category": "external",
"summary": "2455975",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455975"
},
{
"category": "external",
"summary": "2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "2457729",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457729"
},
{
"category": "external",
"summary": "2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41019.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update",
"tracking": {
"current_release_date": "2026-08-21T13:45:32+00:00",
"generator": {
"date": "2026-08-21T13:45:32+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:41019",
"initial_release_date": "2026-07-16T14:35:59+00:00",
"revision_history": [
{
"date": "2026-07-16T14:35:59+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-16T14:35:59+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-21T13:45:32+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHEM 1.1 for RHEL 10",
"product": {
"name": "RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:edge_manager:1.1::el10"
}
}
},
{
"category": "product_name",
"name": "RHEM 1.1 for RHEL 9",
"product": {
"name": "RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:edge_manager:1.1::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Edge Manager"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-0:1.1.3-1.el10em.src",
"product": {
"name": "flightctl-0:1.1.3-1.el10em.src",
"product_id": "flightctl-0:1.1.3-1.el10em.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl@1.1.3-1.el10em?arch=src"
}
}
},
{
"category": "product_version",
"name": "flightctl-0:1.1.3-1.el9em.src",
"product": {
"name": "flightctl-0:1.1.3-1.el9em.src",
"product_id": "flightctl-0:1.1.3-1.el9em.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl@1.1.3-1.el9em?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el10em.x86_64",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el10em.x86_64",
"product_id": "flightctl-agent-0:1.1.3-1.el10em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el10em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el10em.x86_64",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el10em.x86_64",
"product_id": "flightctl-cli-0:1.1.3-1.el10em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el10em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el10em.x86_64",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el10em.x86_64",
"product_id": "flightctl-observability-0:1.1.3-1.el10em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el10em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el10em.x86_64",
"product": {
"name": "flightctl-services-0:1.1.3-1.el10em.x86_64",
"product_id": "flightctl-services-0:1.1.3-1.el10em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el10em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el9em.x86_64",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el9em.x86_64",
"product_id": "flightctl-agent-0:1.1.3-1.el9em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el9em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el9em.x86_64",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el9em.x86_64",
"product_id": "flightctl-cli-0:1.1.3-1.el9em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el9em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el9em.x86_64",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el9em.x86_64",
"product_id": "flightctl-observability-0:1.1.3-1.el9em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el9em?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el9em.x86_64",
"product": {
"name": "flightctl-services-0:1.1.3-1.el9em.x86_64",
"product_id": "flightctl-services-0:1.1.3-1.el9em.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el9em?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el10em.s390x",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el10em.s390x",
"product_id": "flightctl-agent-0:1.1.3-1.el10em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el10em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el10em.s390x",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el10em.s390x",
"product_id": "flightctl-cli-0:1.1.3-1.el10em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el10em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el10em.s390x",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el10em.s390x",
"product_id": "flightctl-observability-0:1.1.3-1.el10em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el10em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el10em.s390x",
"product": {
"name": "flightctl-services-0:1.1.3-1.el10em.s390x",
"product_id": "flightctl-services-0:1.1.3-1.el10em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el10em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el9em.s390x",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el9em.s390x",
"product_id": "flightctl-agent-0:1.1.3-1.el9em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el9em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el9em.s390x",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el9em.s390x",
"product_id": "flightctl-cli-0:1.1.3-1.el9em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el9em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el9em.s390x",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el9em.s390x",
"product_id": "flightctl-observability-0:1.1.3-1.el9em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el9em?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el9em.s390x",
"product": {
"name": "flightctl-services-0:1.1.3-1.el9em.s390x",
"product_id": "flightctl-services-0:1.1.3-1.el9em.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el9em?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"product_id": "flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el10em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"product_id": "flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el10em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"product_id": "flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el10em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el10em.ppc64le",
"product": {
"name": "flightctl-services-0:1.1.3-1.el10em.ppc64le",
"product_id": "flightctl-services-0:1.1.3-1.el10em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el10em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"product_id": "flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el9em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"product_id": "flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el9em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"product_id": "flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el9em?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el9em.ppc64le",
"product": {
"name": "flightctl-services-0:1.1.3-1.el9em.ppc64le",
"product_id": "flightctl-services-0:1.1.3-1.el9em.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el9em?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el10em.aarch64",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el10em.aarch64",
"product_id": "flightctl-agent-0:1.1.3-1.el10em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el10em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el10em.aarch64",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el10em.aarch64",
"product_id": "flightctl-cli-0:1.1.3-1.el10em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el10em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el10em.aarch64",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el10em.aarch64",
"product_id": "flightctl-observability-0:1.1.3-1.el10em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el10em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el10em.aarch64",
"product": {
"name": "flightctl-services-0:1.1.3-1.el10em.aarch64",
"product_id": "flightctl-services-0:1.1.3-1.el10em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el10em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-agent-0:1.1.3-1.el9em.aarch64",
"product": {
"name": "flightctl-agent-0:1.1.3-1.el9em.aarch64",
"product_id": "flightctl-agent-0:1.1.3-1.el9em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-agent@1.1.3-1.el9em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-cli-0:1.1.3-1.el9em.aarch64",
"product": {
"name": "flightctl-cli-0:1.1.3-1.el9em.aarch64",
"product_id": "flightctl-cli-0:1.1.3-1.el9em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-cli@1.1.3-1.el9em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-observability-0:1.1.3-1.el9em.aarch64",
"product": {
"name": "flightctl-observability-0:1.1.3-1.el9em.aarch64",
"product_id": "flightctl-observability-0:1.1.3-1.el9em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-observability@1.1.3-1.el9em?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "flightctl-services-0:1.1.3-1.el9em.aarch64",
"product": {
"name": "flightctl-services-0:1.1.3-1.el9em.aarch64",
"product_id": "flightctl-services-0:1.1.3-1.el9em.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-services@1.1.3-1.el9em?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "flightctl-selinux-0:1.1.3-1.el10em.noarch",
"product": {
"name": "flightctl-selinux-0:1.1.3-1.el10em.noarch",
"product_id": "flightctl-selinux-0:1.1.3-1.el10em.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-selinux@1.1.3-1.el10em?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "flightctl-selinux-0:1.1.3-1.el9em.noarch",
"product": {
"name": "flightctl-selinux-0:1.1.3-1.el9em.noarch",
"product_id": "flightctl-selinux-0:1.1.3-1.el9em.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flightctl-selinux@1.1.3-1.el9em?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-0:1.1.3-1.el10em.src as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src"
},
"product_reference": "flightctl-0:1.1.3-1.el10em.src",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el10em.aarch64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el10em.s390x",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el10em.x86_64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el10em.aarch64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el10em.s390x",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el10em.x86_64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el10em.aarch64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el10em.s390x",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el10em.x86_64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-selinux-0:1.1.3-1.el10em.noarch as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch"
},
"product_reference": "flightctl-selinux-0:1.1.3-1.el10em.noarch",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64"
},
"product_reference": "flightctl-services-0:1.1.3-1.el10em.aarch64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le"
},
"product_reference": "flightctl-services-0:1.1.3-1.el10em.ppc64le",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x"
},
"product_reference": "flightctl-services-0:1.1.3-1.el10em.s390x",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10",
"product_id": "10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64"
},
"product_reference": "flightctl-services-0:1.1.3-1.el10em.x86_64",
"relates_to_product_reference": "10Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-0:1.1.3-1.el9em.src as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src"
},
"product_reference": "flightctl-0:1.1.3-1.el9em.src",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el9em.aarch64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el9em.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el9em.ppc64le as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el9em.s390x as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el9em.s390x",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-agent-0:1.1.3-1.el9em.x86_64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64"
},
"product_reference": "flightctl-agent-0:1.1.3-1.el9em.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el9em.aarch64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el9em.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el9em.ppc64le as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el9em.s390x as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el9em.s390x",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-cli-0:1.1.3-1.el9em.x86_64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
},
"product_reference": "flightctl-cli-0:1.1.3-1.el9em.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el9em.aarch64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el9em.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el9em.ppc64le as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el9em.s390x as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el9em.s390x",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-observability-0:1.1.3-1.el9em.x86_64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64"
},
"product_reference": "flightctl-observability-0:1.1.3-1.el9em.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-selinux-0:1.1.3-1.el9em.noarch as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch"
},
"product_reference": "flightctl-selinux-0:1.1.3-1.el9em.noarch",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el9em.aarch64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64"
},
"product_reference": "flightctl-services-0:1.1.3-1.el9em.aarch64",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el9em.ppc64le as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le"
},
"product_reference": "flightctl-services-0:1.1.3-1.el9em.ppc64le",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el9em.s390x as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x"
},
"product_reference": "flightctl-services-0:1.1.3-1.el9em.s390x",
"relates_to_product_reference": "9Base-RHEM-1.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flightctl-services-0:1.1.3-1.el9em.x86_64 as a component of RHEM 1.1 for RHEL 9",
"product_id": "9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
},
"product_reference": "flightctl-services-0:1.1.3-1.el9em.x86_64",
"relates_to_product_reference": "9Base-RHEM-1.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33815",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-04-07T16:01:25.130006+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455975"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33815"
},
{
"category": "external",
"summary": "RHBZ#2455975",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455975"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33815",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33815"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4771",
"url": "https://pkg.go.dev/vuln/GO-2026-4771"
}
],
"release_date": "2026-04-07T15:19:24.344000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
},
{
"cve": "CVE-2026-33816",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-04-07T16:01:14.142946+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455972"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33816"
},
{
"category": "external",
"summary": "RHBZ#2455972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455972"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33816",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4772",
"url": "https://pkg.go.dev/vuln/GO-2026-4772"
}
],
"release_date": "2026-04-07T15:19:24.529000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
},
{
"cve": "CVE-2026-35469",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-13T03:52:35+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457729"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw affecting OpenShift Container Platform. An attacker with specific elevated cluster roles, such as those permitting pod port forwarding, execution, attachment, or node proxying, could exploit a vulnerability in the SPDY streaming code of Kubelet, CRI-O, and kube-apiserver, leading to unresponsiveness of these critical components.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35469"
},
{
"category": "external",
"summary": "RHBZ#2457729",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457729"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35469",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35469"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469"
}
],
"release_date": "2026-04-13T23:59:59+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "To mitigate this issue, review and restrict the assignment of Kubernetes cluster roles `pods/portforward (create)`, `pods/exec (create)`, `pods/attach (create)`, and `nodes/proxy (get/create)` to untrusted users or service accounts. Ensure that only authorized and necessary entities possess these permissions. Modifying RBAC policies can impact the functionality of applications and services that rely on these permissions; careful testing is recommended.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to the Prometheus remote read endpoint (/api/v1/read). Configure firewall rules or network policies to permit connections only from trusted internal networks or authorized clients. This action reduces the attack surface by limiting exposure to unauthenticated remote attackers. A service restart or reload may be required for the changes to take effect.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"known_not_affected": [
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T14:35:59+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/crypto/ssh release via updated golang or package rebuilds. Ensure SSH servers use supported public-key callback configurations with source-address validation as intended.",
"product_ids": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"10Base-RHEM-1.1:flightctl-0:1.1.3-1.el10em.src",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el10em.x86_64",
"10Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el10em.noarch",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.aarch64",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.ppc64le",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.s390x",
"10Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el10em.x86_64",
"9Base-RHEM-1.1:flightctl-0:1.1.3-1.el9em.src",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-agent-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-cli-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-observability-0:1.1.3-1.el9em.x86_64",
"9Base-RHEM-1.1:flightctl-selinux-0:1.1.3-1.el9em.noarch",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.aarch64",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.ppc64le",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.s390x",
"9Base-RHEM-1.1:flightctl-services-0:1.1.3-1.el9em.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:41928
Vulnerability from csaf_redhat - Published: 2026-07-20 08:34 - Updated: 2026-08-21 13:45Summary
Red Hat Security Advisory: Red Hat Migration Toolkit for Containers
Severity
Important
Notes
Topic: A new version of Migration Toolkit for Containers (MTC) is now available.
Details: The Migration Toolkit for Containers (MTC) enables you to migrate
Kubernetes resources, persistent volume data, and internal container images
between OpenShift Container Platform clusters, using the MTC web console or
the Kubernetes API.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A vulnerability related to predictable random number generation has been discovered in the form-data JavaScript library. The library utilizes Math.random() to determine boundary values for multipart form-encoded data. This presents a security risk if an attacker can observe other values generated by Math.random() within the target application and simultaneously control at least one field of a request made using form-data. Under these conditions, the attacker could potentially predict or determine the boundary values. This predictability could be leveraged to bypass security controls, manipulate form data, or potentially lead to data integrity issues or other forms of exploitation.
5.4 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process. The mitigation applied for CVE-2019-16884 was fairly limited and effectively only caused runc to verify that when we write LSM labels that those labels are actual procfs files.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A denial of service flaw has been discovered in the Axios npm package. When Axios runs on Node.js and is given a URL with the `data:` scheme, it does not perform HTTP. Instead, its Node http adapter decodes the entire payload into memory (`Buffer`/`Blob`) and returns a synthetic 200 response. This path ignores `maxContentLength` / `maxBodyLength` (which only protect HTTP responses), so an attacker can supply a very large `data:` URI and cause the process to allocate unbounded memory and crash (DoS), even if the caller requested responseType: 'stream'.
5.3 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
|
Known not affected
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.
7.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.
5.3 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Threats
Impact
Important
A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Fulcio, a free-to-use certificate authority. This vulnerability allows a denial of service (DoS) due to excessive memory allocation when processing a malicious OpenID Connect (OIDC) identity token containing numerous period characters.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Moderate
A decompression based denial of service flaw has been discovered in the AIOHTTP python library. Library versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in aiohttp, an asynchronous HTTP client/server framework for Python. A remote attacker could exploit this vulnerability by sending a specially crafted POST request to an application using the Request.post() method, provided that Python optimizations are enabled. This could lead to an infinite loop, resulting in a Denial of Service (DoS) attack, making the affected application unavailable.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in aiohttp. A remote attacker can craft a malicious request that, when processed by an aiohttp server using the `Request.post()` method, causes the server's memory to fill uncontrollably. This can lead to a Denial of Service (DoS) by freezing the server, making it unavailable to legitimate users.
6.8 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in webpack-dev-server. When a user configures a proxy with a broad context, such as '/', and enables WebSocket (ws: true) forwarding, the development server's own Hot Module Replacement (HMR) WebSocket can be intercepted. This interception leads to the leakage of the browser's cookies and Origin header to the proxy target, bypassing the server's Host/Origin validation. Additionally, it can corrupt the HMR socket, resulting in a denial of service for the HMR functionality.
7.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Threats
Impact
Important
A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.
8.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the node-tar library. This vulnerability allows an attacker to craft malicious archives that, when extracted, can bypass intended security restrictions. This leads to arbitrary file overwrite and symlink poisoning, potentially allowing unauthorized modification of files on the system.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system's object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user's browser.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
References
448 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new version of Migration Toolkit for Containers (MTC) is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "The Migration Toolkit for Containers (MTC) enables you to migrate\nKubernetes resources, persistent volume data, and internal container images\nbetween OpenShift Container Platform clusters, using the MTC web console or\nthe Kubernetes API.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41928",
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-12816",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-13465",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-15284",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-52881",
"url": "https://access.redhat.com/security/cve/CVE-2025-52881"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58183",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58754",
"url": "https://access.redhat.com/security/cve/CVE-2025-58754"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61726",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-62718",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66031",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66418",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66471",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66506",
"url": "https://access.redhat.com/security/cve/CVE-2025-66506"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69223",
"url": "https://access.redhat.com/security/cve/CVE-2025-69223"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69227",
"url": "https://access.redhat.com/security/cve/CVE-2025-69227"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69228",
"url": "https://access.redhat.com/security/cve/CVE-2025-69228"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-7783",
"url": "https://access.redhat.com/security/cve/CVE-2025-7783"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13149",
"url": "https://access.redhat.com/security/cve/CVE-2026-13149"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13676",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-21441",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-22029",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-23490",
"url": "https://access.redhat.com/security/cve/CVE-2026-23490"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-23745",
"url": "https://access.redhat.com/security/cve/CVE-2026-23745"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-30922",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32283",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40895",
"url": "https://access.redhat.com/security/cve/CVE-2026-40895"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42264",
"url": "https://access.redhat.com/security/cve/CVE-2026-42264"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42338",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45736",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45822",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9277",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9595",
"url": "https://access.redhat.com/security/cve/CVE-2026-9595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/migration_toolkit_for_containers/index",
"url": "https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/migration_toolkit_for_containers/index"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41928.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Migration Toolkit for Containers",
"tracking": {
"current_release_date": "2026-08-21T13:45:37+00:00",
"generator": {
"date": "2026-08-21T13:45:37+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:41928",
"initial_release_date": "2026-07-20T08:34:29+00:00",
"revision_history": [
{
"date": "2026-07-20T08:34:29+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-15T05:55:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-21T13:45:37+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Migration Toolkit 1.8",
"product": {
"name": "Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhmt:1.8::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Migration Toolkit"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-controller-rhel8@sha256%3Ac6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-controller-rhel8\u0026tag=1783953372"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-hook-runner-rhel8@sha256%3A02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8\u0026tag=1783931722"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-log-reader-rhel8@sha256%3Aa95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8\u0026tag=1783914253"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-must-gather-rhel8@sha256%3A7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8\u0026tag=1783914261"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-openvpn-rhel8@sha256%3Af7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8\u0026tag=1783914237"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-rhel8-operator@sha256%3A351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-rhel8-operator\u0026tag=1783969382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-operator-bundle@sha256%3A7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-operator-bundle\u0026tag=1783969793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-registry-rhel8@sha256%3A69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-registry-rhel8\u0026tag=1783914276"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-rsync-transfer-rhel8@sha256%3A5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8\u0026tag=1783914257"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-ui-rhel8@sha256%3Ad2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-ui-rhel8\u0026tag=1783690532"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-velero-plugin-for-mtc-rhel8@sha256%3Aee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8\u0026tag=1783914255"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-7783",
"cwe": {
"id": "CWE-330",
"name": "Use of Insufficiently Random Values"
},
"discovery_date": "2025-07-18T17:00:43.396637+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2381959"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability related to predictable random number generation has been discovered in the form-data JavaScript library. The library utilizes Math.random() to determine boundary values for multipart form-encoded data.\n\nThis presents a security risk if an attacker can observe other values generated by Math.random() within the target application and simultaneously control at least one field of a request made using form-data. Under these conditions, the attacker could potentially predict or determine the boundary values. This predictability could be leveraged to bypass security controls, manipulate form data, or potentially lead to data integrity issues or other forms of exploitation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: Unsafe random function in form-data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw does not affect host systems. The impact of this vulnerability is limited to specific applications which integrate the `form-data` library. As a result the impact of this CVE is limited on RedHat systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-7783"
},
{
"category": "external",
"summary": "RHBZ#2381959",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2381959"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-7783",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7783"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-7783",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7783"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0",
"url": "https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-78g4",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-78g4"
}
],
"release_date": "2025-07-18T16:34:44.889000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "form-data: Unsafe random function in form-data"
},
{
"cve": "CVE-2025-12816",
"cwe": {
"id": "CWE-179",
"name": "Incorrect Behavior Order: Early Validation"
},
"discovery_date": "2025-11-25T20:01:05.875196+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417097"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products due to an interpretation conflict in the node-forge library. An unauthenticated attacker could exploit this flaw by crafting malicious ASN.1 structures, leading to a bypass of cryptographic verifications and security decisions in affected applications. This impacts various Red Hat products that utilize node-forge for cryptographic operations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "RHBZ#2417097",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417097"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-12816",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge",
"url": "https://github.com/digitalbazaar/forge"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/pull/1124",
"url": "https://github.com/digitalbazaar/forge/pull/1124"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq"
},
{
"category": "external",
"summary": "https://kb.cert.org/vuls/id/521113",
"url": "https://kb.cert.org/vuls/id/521113"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/node-forge",
"url": "https://www.npmjs.com/package/node-forge"
}
],
"release_date": "2025-11-25T19:15:50.243000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications"
},
{
"cve": "CVE-2025-13465",
"cwe": {
"id": "CWE-1321",
"name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
},
"discovery_date": "2026-01-21T20:01:28.774829+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: prototype pollution in _.unset and _.omit functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is only exploitable by applications using the _.unset and _.omit functions on an object and allowing user input to determine the path of the property to be removed. This issue only allows the deletion of properties but does not allow overwriting their behavior, limiting the impact to a denial of service. Due to this reason, this vulnerability has been rated with an important severity.\n\nIn Grafana, JavaScript code runs only in the browser, while the server side is all Golang. Therefore, the worst-case scenario is a loss of functionality in the client application inside the browser. To reflect this, the CVSS availability metric and the severity of the Grafana and the Grafana-PCP component have been updated to low and moderate, respectively.\n\nThe lodash dependency is bundled and used by the pcs-web-ui component of the PCS package. In Red Hat Enterprise Linux 8.10, the pcs-web-ui component is no longer included in the PCS package. As a result, RHEL 8.10 does not ship the vulnerable lodash component within PCS and is therefore not-affected by this CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "RHBZ#2431740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg",
"url": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg"
}
],
"release_date": "2026-01-21T19:05:28.846000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement strict input validation before passing any property paths to the _.unset and _.omit functions to block attempts to access the prototype chain. Ensure that strings like __proto__, constructor and prototype are blocked, for example.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: prototype pollution in _.unset and _.omit functions"
},
{
"cve": "CVE-2025-15284",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-29T23:00:58.541337+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2425946"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qs: qs: Denial of Service via improper input validation in array parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products that utilize the `qs` module for parsing query strings, particularly when processing user-controlled input with bracket notation. The `arrayLimit` option, intended to prevent resource exhaustion, is bypassed when bracket notation (`a[]=value`) is used, allowing a remote attacker to cause a denial of service through memory exhaustion. This can lead to application crashes or unresponsiveness, making the service unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "RHBZ#2425946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2425946"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-15284",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15284"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9",
"url": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p",
"url": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p"
}
],
"release_date": "2025-12-29T22:56:45.240000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "qs: qs: Denial of Service via improper input validation in array parsing"
},
{
"cve": "CVE-2025-52881",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2025-10-17T14:19:18.652000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2404715"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process. The mitigation applied for CVE-2019-16884 was fairly limited and effectively only caused runc to verify that when we write LSM labels that those labels are actual procfs files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat considers this as an Important flaw since the impact is limited to local attack with minimal privileges in order to jeopardize the environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-52881"
},
{
"category": "external",
"summary": "RHBZ#2404715",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2404715"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-52881",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52881"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-52881",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-52881"
},
{
"category": "external",
"summary": "https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm",
"url": "https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm"
},
{
"category": "external",
"summary": "https://github.com/opencontainers/selinux/pull/237",
"url": "https://github.com/opencontainers/selinux/pull/237"
}
],
"release_date": "2025-11-05T09:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Potential mitigations for this issue include:\n\n* Using rootless containers, as doing so will block most of the inadvertent writes (runc would run with reduced privileges, making attempts to write to procfs files ineffective).\n* Based on our analysis, neither AppArmor or SELinux can protect against the full version of the redirected write attack. The container runtime is generally privileged enough to write to arbitrary procfs files, which is more than sufficient to cause a container breakout.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects"
},
{
"cve": "CVE-2025-58183",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-10-29T23:01:50.573951+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407258"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to be able to process a specially crafted GNU tar pax 1.0 archive with the application using the archive/tar package. Additionally, this issue can cause the Go application to allocate a large amount of memory, eventually leading to an out-of-memory condition and resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "RHBZ#2407258",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407258"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58183",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58183"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://go.dev/cl/709861",
"url": "https://go.dev/cl/709861"
},
{
"category": "external",
"summary": "https://go.dev/issue/75677",
"url": "https://go.dev/issue/75677"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4014",
"url": "https://pkg.go.dev/vuln/GO-2025-4014"
}
],
"release_date": "2025-10-29T22:10:14.376000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map"
},
{
"cve": "CVE-2025-58754",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-09-12T02:00:53.897605+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2394735"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw has been discovered in the Axios npm package. When Axios runs on Node.js and is given a URL with the `data:` scheme, it does not perform HTTP. Instead, its Node http adapter decodes the entire payload into memory (`Buffer`/`Blob`) and returns a synthetic 200 response.\nThis path ignores `maxContentLength` / `maxBodyLength` (which only protect HTTP responses), so an attacker can supply a very large `data:` URI and cause the process to allocate unbounded memory and crash (DoS), even if the caller requested responseType: \u0027stream\u0027.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios DoS via lack of data size check",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Availability impact is limited to the application which bundles axios and not the host Red Hat system.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58754"
},
{
"category": "external",
"summary": "RHBZ#2394735",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2394735"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58754",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58754"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58754",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58754"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/945435fc51467303768202250debb8d4ae892593",
"url": "https://github.com/axios/axios/commit/945435fc51467303768202250debb8d4ae892593"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/7011",
"url": "https://github.com/axios/axios/pull/7011"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.12.0",
"url": "https://github.com/axios/axios/releases/tag/v1.12.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-4hjh-wcwx-xvwj",
"url": "https://github.com/axios/axios/security/advisories/GHSA-4hjh-wcwx-xvwj"
}
],
"release_date": "2025-09-12T01:16:40.513000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "axios: Axios DoS via lack of data size check"
},
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-62718",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-09T15:01:48.111177+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456913"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has limited impact due to combination of non-default conditions to exploit: the attacker must be able to control or influence URLs passed to axios in a server-side context, the application must have both `HTTP_PROXY` and `NO_PROXY` configured, and the proxy itself must be positioned to act on the misdirected traffic or have been compromised by the attacker to intercept the rerouted traffic.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "RHBZ#2456913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1",
"url": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2",
"url": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df",
"url": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10661",
"url": "https://github.com/axios/axios/pull/10661"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
}
],
"release_date": "2026-04-09T14:31:46.067000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization"
},
{
"cve": "CVE-2025-66031",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2025-11-26T23:01:36.363253+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417397"
}
],
"notes": [
{
"category": "description",
"text": "An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge ASN.1 Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "RHBZ#2417397",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417397"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66031",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66031"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451",
"url": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27"
}
],
"release_date": "2025-11-26T22:23:26.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "node-forge: node-forge ASN.1 Unbounded Recursion"
},
{
"cve": "CVE-2025-66418",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-05T17:01:20.277857+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419455"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "RHBZ#2419455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419455"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66418"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8",
"url": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53"
}
],
"release_date": "2025-12-05T16:02:15.271000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion"
},
{
"cve": "CVE-2025-66471",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2025-12-05T17:02:21.597728+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419467"
}
],
"notes": [
{
"category": "description",
"text": "A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 Streaming API improperly handles highly compressed data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in urllib3\u0027s streaming API that can lead to excessive resource consumption, including high CPU usage and significant memory allocation. When processing highly compressed data from untrusted sources, even small requested chunks can trigger full decompression, posing a denial-of-service risk to client-side applications utilizing affected urllib3 versions prior to 2.6.0.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "RHBZ#2419467",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419467"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66471",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66471"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7",
"url": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37"
}
],
"release_date": "2025-12-05T16:06:08.531000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 Streaming API improperly handles highly compressed data"
},
{
"cve": "CVE-2025-66506",
"cwe": {
"id": "CWE-405",
"name": "Asymmetric Resource Consumption (Amplification)"
},
"discovery_date": "2025-12-04T23:01:20.507333+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419056"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Fulcio, a free-to-use certificate authority. This vulnerability allows a denial of service (DoS) due to excessive memory allocation when processing a malicious OpenID Connect (OIDC) identity token containing numerous period characters.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat as Fulcio, a certificate authority used for issuing code signing certificates, is susceptible to a denial of service when processing a specially crafted OpenID Connect (OIDC) token. This could lead to resource exhaustion and service unavailability in affected Red Hat products that utilize Fulcio.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66506"
},
{
"category": "external",
"summary": "RHBZ#2419056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419056"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66506",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66506"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66506",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66506"
},
{
"category": "external",
"summary": "https://github.com/sigstore/fulcio/commit/765a0e57608b9ef390e1eeeea8595b9054c63a5a",
"url": "https://github.com/sigstore/fulcio/commit/765a0e57608b9ef390e1eeeea8595b9054c63a5a"
},
{
"category": "external",
"summary": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f83f-xpx7-ffpw",
"url": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f83f-xpx7-ffpw"
}
],
"release_date": "2025-12-04T22:04:41.637000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2025-69223",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-06T20:01:19.831548+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427456"
}
],
"notes": [
{
"category": "description",
"text": "A decompression based denial of service flaw has been discovered in the AIOHTTP python library. Library versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host\u0027s memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: AIOHTTP\u0027s HTTP Parser auto_decompress feature is vulnerable to zip bomb",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69223"
},
{
"category": "external",
"summary": "RHBZ#2427456",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427456"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69223",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69223"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69223",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69223"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/2b920c39002cee0ec5b402581779bbaaf7c9138a",
"url": "https://github.com/aio-libs/aiohttp/commit/2b920c39002cee0ec5b402581779bbaaf7c9138a"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6mq8-rvhq-8wgg",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6mq8-rvhq-8wgg"
}
],
"release_date": "2026-01-05T22:00:17.715000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "aiohttp: AIOHTTP\u0027s HTTP Parser auto_decompress feature is vulnerable to zip bomb"
},
{
"cve": "CVE-2025-69227",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-01-06T00:01:17.036900+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427256"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in aiohttp, an asynchronous HTTP client/server framework for Python. A remote attacker could exploit this vulnerability by sending a specially crafted POST request to an application using the Request.post() method, provided that Python optimizations are enabled. This could lead to an infinite loop, resulting in a Denial of Service (DoS) attack, making the affected application unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: aiohttp: Denial of Service via specially crafted POST request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat products as it can lead to a Denial of Service (DoS) in applications utilizing the `aiohttp` library. Exploitation requires Python optimizations to be explicitly enabled (e.g., via `-O` or `PYTHONOPTIMIZE=1`) and the application to process POST requests using the `Request.post()` method. Red Hat products are affected if they meet these specific configuration and usage criteria.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69227"
},
{
"category": "external",
"summary": "RHBZ#2427256",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427256"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69227",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69227"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/bc1319ec3cbff9438a758951a30907b072561259",
"url": "https://github.com/aio-libs/aiohttp/commit/bc1319ec3cbff9438a758951a30907b072561259"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jj3x-wxrx-4x23",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jj3x-wxrx-4x23"
}
],
"release_date": "2026-01-05T23:19:31.396000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "aiohttp: aiohttp: Denial of Service via specially crafted POST request"
},
{
"cve": "CVE-2025-69228",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-06T00:01:02.119065+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427254"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in aiohttp. A remote attacker can craft a malicious request that, when processed by an aiohttp server using the `Request.post()` method, causes the server\u0027s memory to fill uncontrollably. This can lead to a Denial of Service (DoS) by freezing the server, making it unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: aiohttp: Denial of Service via memory exhaustion from crafted POST request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat products. A flaw in aiohttp allows a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted POST request to an aiohttp server that utilizes the `Request.post()` method. This can lead to uncontrolled memory consumption, freezing the server and making the server unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69228"
},
{
"category": "external",
"summary": "RHBZ#2427254",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427254"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69228",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69228"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69228",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69228"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/b7dbd35375aedbcd712cbae8ad513d56d11cce60",
"url": "https://github.com/aio-libs/aiohttp/commit/b7dbd35375aedbcd712cbae8ad513d56d11cce60"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6jhg-hg63-jvvf",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6jhg-hg63-jvvf"
}
],
"release_date": "2026-01-05T23:30:33.440000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "aiohttp: aiohttp: Denial of Service via memory exhaustion from crafted POST request"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"cve": "CVE-2026-9277",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-05-22T14:01:14.427751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480741"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "RHBZ#2480741",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480741"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9277"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote",
"url": "https://github.com/ljharb/shell-quote"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/commit/1518179",
"url": "https://github.com/ljharb/shell-quote/commit/1518179"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p",
"url": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/shell-quote",
"url": "https://www.npmjs.com/package/shell-quote"
}
],
"release_date": "2026-05-22T13:22:38.873000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators"
},
{
"cve": "CVE-2026-9595",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-06-15T16:01:15.427658+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488934"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in webpack-dev-server. When a user configures a proxy with a broad context, such as \u0027/\u0027, and enables WebSocket (ws: true) forwarding, the development server\u0027s own Hot Module Replacement (HMR) WebSocket can be intercepted. This interception leads to the leakage of the browser\u0027s cookies and Origin header to the proxy target, bypassing the server\u0027s Host/Origin validation. Additionally, it can corrupt the HMR socket, resulting in a denial of service for the HMR functionality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9595"
},
{
"category": "external",
"summary": "RHBZ#2488934",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488934"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9595"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/facebook/create-react-app/pull/7444",
"url": "https://github.com/facebook/create-react-app/pull/7444"
},
{
"category": "external",
"summary": "https://github.com/vuejs/vue-cli/commit/72ba7505aff2a8314e82aa5082379a77504a1fcb",
"url": "https://github.com/vuejs/vue-cli/commit/72ba7505aff2a8314e82aa5082379a77504a1fcb"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack-dev-server/pull/4316",
"url": "https://github.com/webpack/webpack-dev-server/pull/4316"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack-dev-server/security/advisories/GHSA-mx8g-39q3-5c79",
"url": "https://github.com/webpack/webpack-dev-server/security/advisories/GHSA-mx8g-39q3-5c79"
}
],
"release_date": "2026-06-15T15:00:21.488000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, users should avoid configuring `webpack-dev-server` with a broad proxy context (e.g., `/`) when WebSocket forwarding (`ws: true`) is enabled. Instead, define specific paths for the proxy context. Alternatively, disable WebSocket forwarding by omitting `ws: true` from the proxy entry if WebSocket functionality is not required for the proxy target. This configuration change may require restarting the `webpack-dev-server` instance to take effect.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-13149",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-30T10:00:59.843854+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494813"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in brace-expansion, a widely-used npm package for expanding brace sequences. The expand() function exhibits exponential-time complexity when processing consecutive non-expanding brace groups. An attacker who can supply crafted input to expand(), directly or transitively via minimatch or glob, can cause significant CPU consumption and event-loop blocking, resulting in denial of service. The max option does not mitigate this issue, as it bounds the output size rather than the recursion work.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13149"
},
{
"category": "external",
"summary": "RHBZ#2494813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494813"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13149",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13149"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754",
"url": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/brace-expansion",
"url": "https://www.npmjs.com/package/brace-expansion"
}
],
"release_date": "2026-06-30T08:30:34.502000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "There is no practical mitigation for this vulnerability. The brace-expansion package is typically a transitive dependency pulled in via minimatch and glob, making it difficult to isolate. Users should upgrade to a fixed version of brace-expansion when one becomes available.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity"
},
{
"cve": "CVE-2026-13676",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-29T14:01:55.592330+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494197"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `fast-uri` allows a remote attacker to bypass host-based security policies. Applications that rely on `fast-uri` for URL parsing and policy enforcement, such as denylists or redirect validations, can be circumvented due to inconsistent handling of Unicode hostnames. This discrepancy between `fast-uri` and other URL parsers could lead to unauthorized resource access or malicious redirects in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "RHBZ#2494197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13676"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6"
}
],
"release_date": "2026-06-29T13:22:44.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization"
},
{
"cve": "CVE-2026-21441",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-01-07T23:01:59.422078+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427726"
}
],
"notes": [
{
"category": "description",
"text": "urllib3 is an HTTP client library for Python. urllib3\u0027s streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "RHBZ#2427726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427726"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-21441",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21441"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b",
"url": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99"
}
],
"release_date": "2026-01-07T22:09:01.936000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)"
},
{
"cve": "CVE-2026-22029",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-01-10T04:01:03.694749+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2428412"
}
],
"notes": [
{
"category": "description",
"text": "A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "RHBZ#2428412",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428412"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-22029",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22029"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx",
"url": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx"
}
],
"release_date": "2026-01-10T02:42:32.736000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects"
},
{
"cve": "CVE-2026-23490",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-16T20:03:33.790513+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2430472"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23490"
},
{
"category": "external",
"summary": "RHBZ#2430472",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430472"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23490",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23490"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970",
"url": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2",
"url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq"
}
],
"release_date": "2026-01-16T19:03:36.442000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID"
},
{
"cve": "CVE-2026-23745",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-01-16T23:01:26.508727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2430538"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the node-tar library. This vulnerability allows an attacker to craft malicious archives that, when extracted, can bypass intended security restrictions. This leads to arbitrary file overwrite and symlink poisoning, potentially allowing unauthorized modification of files on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products that utilize the node-tar library. The flaw allows an attacker to perform arbitrary file overwrite and symlink poisoning by crafting malicious tar archives. This occurs due to insufficient path sanitization of hardlink and symbolic link entries, even when the default secure behavior (preservePaths is false) is enabled.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23745"
},
{
"category": "external",
"summary": "RHBZ#2430538",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430538"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23745",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23745"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23745",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23745"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e",
"url": "https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97",
"url": "https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97"
}
],
"release_date": "2026-01-16T22:00:08.769000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-30922",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-03-18T04:02:45.401296+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448553"
}
],
"notes": [
{
"category": "description",
"text": "An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "RHBZ#2448553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-30922",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-30922"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",
"url": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r"
}
],
"release_date": "2026-03-18T02:29:45.857000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-40895",
"cwe": {
"id": "CWE-212",
"name": "Improper Removal of Sensitive Information Before Storage or Transfer"
},
"discovery_date": "2026-04-21T21:02:33.280553+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2460297"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40895"
},
{
"category": "external",
"summary": "RHBZ#2460297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460297"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40895",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40895"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895"
},
{
"category": "external",
"summary": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653",
"url": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653"
}
],
"release_date": "2026-04-21T19:59:59.759000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects"
},
{
"cve": "CVE-2026-42264",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-05-08T04:02:21.039378+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467927"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system\u0027s object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Prototype pollution allows information disclosure and request manipulation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important prototype pollution flaw in Axios could result in information disclosure and network request manipulation. The vulnerability occurs when a co-located dependency in the application environment successfully pollutes the JavaScript `Object.prototype`. Under these conditions, Axios may unknowingly incorporate the manipulated properties into its outbound HTTP requests, potentially compromising data confidentiality and integrity. Exploitation is contingent on a prior successful prototype pollution attack from another component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42264"
},
{
"category": "external",
"summary": "RHBZ#2467927",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467927"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42264",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42264"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa",
"url": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10779",
"url": "https://github.com/axios/axios/pull/10779"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.2",
"url": "https://github.com/axios/axios/releases/tag/v1.15.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj",
"url": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj"
}
],
"release_date": "2026-05-08T03:20:24.248000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Prototype pollution allows information disclosure and request manipulation"
},
{
"cve": "CVE-2026-42338",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-12T21:01:14.436876+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2476810"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in the `ip-address` JavaScript library is rated as Important. It allows for cross-site scripting (XSS) when an application processes untrusted input through the `Address6` constructor and subsequently renders the unescaped output of methods like `Address6.group()`, `Address6.link()`, or `AddressError.parseMessage` directly as HTML. While the library itself is affected, exploitation is contingent on specific application-level rendering practices that may not be common in Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "RHBZ#2476810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42338",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42338"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g",
"url": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g"
}
],
"release_date": "2026-05-12T19:43:16.470000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-45736",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-05-15T16:00:55.786944+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477914"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in the `ws` WebSocket library for Node.js could lead to sensitive information disclosure. The flaw occurs when a `TypedArray` is specifically provided as the `reason` argument to the `websocket.close()` function, potentially exposing uninitialized memory. Red Hat products utilizing this library may be affected if their implementations allow for such a crafted `close()` call.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "RHBZ#2477914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477914"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45736",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086",
"url": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx"
}
],
"release_date": "2026-05-15T14:53:57.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`"
},
{
"cve": "CVE-2026-45822",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-30T09:01:06.468966+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494807"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "decode-uri-component: decode-uri-component: Denial of Service via crafted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service flaw was found in the decode-uri-component npm package. The decode() function exhibits super-linear time complexity when processing input containing many percent-encoded sequences, allowing an attacker to cause significant CPU consumption and event-loop blocking. In Red Hat products where this package is bundled (OpenShift Console, Quay, Pipelines, RHOAI, and others), exploitation requires that attacker-controlled input containing crafted percent-encoded strings reaches the decode() function without prior length validation. Red Hat rates this as Moderate severity since the impact is limited to availability with no confidentiality or integrity impact, consistent with the CNA\u0027s CVSS 4.0 assessment of 6.6 Medium.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "RHBZ#2494807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494807"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js",
"url": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005",
"url": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/decode-uri-component",
"url": "https://www.npmjs.com/package/decode-uri-component"
}
],
"release_date": "2026-06-30T08:05:36.399000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Validate and limit the length of any user-controlled input before passing it to decode-uri-component\u0027s decode() function. Inputs containing more than approximately 200 percent-encoded tokens (e.g. \u0027%ab\u0027 sequences) can trigger noticeable delays. Reject or truncate URI components exceeding a reasonable length threshold before decoding. A fix exists in the upstream repository (commit fa479daf) but has not yet been included in an npm release.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "decode-uri-component: decode-uri-component: Denial of Service via crafted input"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
]
}
RHSA-2026:5110
Vulnerability from csaf_redhat - Published: 2026-03-19 10:27 - Updated: 2026-08-21 13:50Summary
Red Hat Security Advisory: Multicluster Global Hub 1.5.4 security update
Severity
Important
Notes
Topic: Multicluster Global Hub v1.5.4 general availability release images, which provide security fixes, bug fixes, and updated container images.
Red Hat Product Security has rated this update as having a security impact of Important.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.
Details: Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A Go application processing a malicious archive can become unresponsive or crash, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64 | — |
Vendor Fix
fix
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64 | — |
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64 | — |
Vendor Fix
fix
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64 | — |
Threats
Impact
Moderate
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64 | — |
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in nats-server. The WebSockets implementation fails to enforce a memory allocation limit during the decompression of WebSocket messages. A malicious compressed payload allows an attacker to cause an excessive memory consumption, eventually resulting in a server crash and a complete denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64 | — |
Workaround
|
Threats
Impact
Moderate
References
64 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Multicluster Global Hub v1.5.4 general availability release images, which provide security fixes, bug fixes, and updated container images.\n\nRed Hat Product Security has rated this update as having a security impact of Important. \nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:5110",
"url": "https://access.redhat.com/errata/RHSA-2026:5110"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61726",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61728",
"url": "https://access.redhat.com/security/cve/CVE-2025-61728"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27571",
"url": "https://access.redhat.com/security/cve/CVE-2026-27571"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5110.json"
}
],
"title": "Red Hat Security Advisory: Multicluster Global Hub 1.5.4 security update",
"tracking": {
"current_release_date": "2026-08-21T13:50:20+00:00",
"generator": {
"date": "2026-08-21T13:50:20+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:5110",
"initial_release_date": "2026-03-19T10:27:09+00:00",
"revision_history": [
{
"date": "2026-03-19T10:27:09+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-15T05:55:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-21T13:50:20+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat multicluster global hub 1.5.1",
"product": {
"name": "Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:multicluster_globalhub:1.5::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat multicluster global hub"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3Ad28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub\u0026tag=1773650767"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3Aa57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub\u0026tag=1773650627"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Aadfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub\u0026tag=1773650749"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-operator-bundle@sha256%3A4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub\u0026tag=1773652587"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Aecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub\u0026tag=1773649850"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub\u0026tag=1773649705"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub\u0026tag=1773650767"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub\u0026tag=1773650627"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Aa10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub\u0026tag=1773650749"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub\u0026tag=1773649850"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3Ad13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub\u0026tag=1773649705"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3Acc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub\u0026tag=1773650767"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub\u0026tag=1773650627"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub\u0026tag=1773650749"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub\u0026tag=1773649850"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3Ab8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub\u0026tag=1773649705"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3Af8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub\u0026tag=1773650767"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub\u0026tag=1773650627"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Ac045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub\u0026tag=1773650749"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub\u0026tag=1773649850"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3Abace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub\u0026tag=1773649705"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64 as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64 as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64 as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64 as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64 as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64 as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64 as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64 as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64 as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64 as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64 as a component of Red Hat multicluster global hub 1.5.1",
"product_id": "Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-19T10:27:09+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.14/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5110"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61728",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:39.965024+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434431"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A Go application processing a malicious archive can become unresponsive or crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to be able to process a malicious zip archive with an application using the archive/zip package. Additionally, this vulnerability can cause a Go application to consume an excessive amount of CPU and memory, eventually resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61728"
},
{
"category": "external",
"summary": "RHBZ#2434431",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434431"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61728",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61728"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728"
},
{
"category": "external",
"summary": "https://go.dev/cl/736713",
"url": "https://go.dev/cl/736713"
},
{
"category": "external",
"summary": "https://go.dev/issue/77102",
"url": "https://go.dev/issue/77102"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4342",
"url": "https://pkg.go.dev/vuln/GO-2026-4342"
}
],
"release_date": "2026-01-28T19:30:31.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-19T10:27:09+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.14/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5110"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, implement a timeout in your archive/zip processing logic to abort the operation if it exceeds a few seconds, preventing the application from consuming an excessive amount of resources.",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-19T10:27:09+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.14/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5110"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-19T10:27:09+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.14/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5110"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-19T10:27:09+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.14/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5110"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-19T10:27:09+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.14/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5110"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-27571",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-02-24T17:04:11.684134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2442401"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nats-server. The WebSockets implementation fails to enforce a memory allocation limit during the decompression of WebSocket messages. A malicious compressed payload allows an attacker to cause an excessive memory consumption, eventually resulting in a server crash and a complete denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nats-server: WebSockets pre-auth memory DoS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw does not require valid NATS credentials to be exploited as the use of compression is negotiated before the authentication process. However, only deployments using WebSockets and that are exposed to untrusted network endpoints are vulnerable to this issue, limiting its exposure. Due to these reasons, this issue has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27571"
},
{
"category": "external",
"summary": "RHBZ#2442401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27571",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27571"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27571",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27571"
},
{
"category": "external",
"summary": "https://github.com/nats-io/nats-server/commit/f77fb7c4535e6727cc1a2899cd8e6bbdd8ba2017",
"url": "https://github.com/nats-io/nats-server/commit/f77fb7c4535e6727cc1a2899cd8e6bbdd8ba2017"
},
{
"category": "external",
"summary": "https://github.com/nats-io/nats-server/releases/tag/v2.11.12",
"url": "https://github.com/nats-io/nats-server/releases/tag/v2.11.12"
},
{
"category": "external",
"summary": "https://github.com/nats-io/nats-server/releases/tag/v2.12.3",
"url": "https://github.com/nats-io/nats-server/releases/tag/v2.12.3"
},
{
"category": "external",
"summary": "https://github.com/nats-io/nats-server/security/advisories/GHSA-qrvq-68c2-7grw",
"url": "https://github.com/nats-io/nats-server/security/advisories/GHSA-qrvq-68c2-7grw"
}
],
"release_date": "2026-02-24T15:59:17.926000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-19T10:27:09+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.14/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5110"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:1e950fd906277c3bafaffa140dc387b14d07d2a818c18638b98d03c21cb618fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:64543029a7895652884f31bc0d94cd39868617b1c47bb5cae5e5fa23689e4480_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:9850fe55e07917fc01f1562f3e4ba555c7c1a7ee9bc93edb3ec6e47b45671163_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:a57734fe379ec378107c03068b4fce04ae186656352c810b5db2b91bf8ca1eb1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:7a5453ebb841bfcaae1b15c823a6ca2e4714d4028a457d5687d412ee568c2062_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:cc48d9258a74255d7b46dbba8550a224fa97dc5f5fe095093d6e72e1a22a8461_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d28a834892e0339001e0c414ad1eb697a9d822e5638b8422ae6f2950036bb858_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f8d74fced944874bb10872332c1fb3884b03cb68449ffad4bb8633d70e700745_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:0f39666f8f6365d09cd0716348344adb091fa47171810fbf821088b5a12978fd_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a10ba2206c5d95f2df3e198ddc002ee354272e8660acb4ea68797083f35dba6d_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:adfa7c9d11670bf55289595d6d21124741586c1116e3f5427a5fd350e140d094_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:c045f9b0e496240b907d0ba572fc1bbd0a12e1510115ff1884e3a7226206500c_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:4a587f8153ff2a466414fb69e288f754da2b9f43154ba1ede5e9493a6d43c587_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:574a52d17bd38da7882a32dedbb991ce81b5a67b8fdffe68e51ca477f790d0e1_amd64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b8c5202df848f0b13960183434c382ae188ed2fa728bc5437e47622ec948c443_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:bace0a9040688db829cccfd83579e0a88ab08991b2ff6dc1064af72a14d5b2f7_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:d13900e0094bac295a523436594d568101888ab10732c297c4ab01ad92d5a296_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:01162aa8ce5c48b47301fd4c9a6835fda1b36358804c3ad50a5230fd151d2916_ppc64le",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:32009013a53f53faeb9107e06f8c654cdaaaa1233bcecdee290e9592df77b968_s390x",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:84eb26e40548fbeba8e3b0a85dd167d74c2cdc0909523d25e4942fe22e77eebb_arm64",
"Red Hat multicluster global hub 1.5.1:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:ecb1b97101f371f6159e3ca2eecb8be0fb04019ce379e5cc7936c146150cc36c_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nats-server: WebSockets pre-auth memory DoS"
}
]
}
RHSA-2026:54757
Vulnerability from csaf_redhat - Published: 2026-08-13 23:45 - Updated: 2026-08-21 13:15Summary
Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 security advisory
Severity
Important
Notes
Topic: An update for Red Hat OpenStack Platform 16.2 (Train) is now available.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service (IaaS) cloud running on commonly available physical hardware.
Security Fix(es):
* crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
* openstack-nova-compute: Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling in OpenStack Nova (CVE-2026-24708)
* pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490)
* golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
* crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption (CVE-2025-68121)
* openstack-glance: OpenStack Glance: Server-Side Request Forgery leading to unauthorized internal network access (CVE-2026-34881)
* crypto/x509: Incorrect enforcement of email constraints in crypto/x509 (CVE-2026-27137)
* net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)
* google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)
* etcd: etcd: Authorization bypass allows information disclosure and denial of service (CVE-2026-33413)
* crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)
* crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810)
* golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282)
* crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)
* crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)
* net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
* erlang: Erlang OTP public_key: Certificate chain forgery via improper trust chain validation (CVE-2026-42789)
* crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)
* oslo.messaging: openstack: OpenStack oslo.messaging: Man-in-the-middle attack via improper TLS hostname verification (CVE-2026-44393)
* erlang: Erlang OTP public_key: Certificate validation bypass allows hostname spoofing (CVE-2026-42790)
* openstack-keystone: OpenStack Keystone: Unauthorized access and privilege escalation via AWS signature validation flaw (CVE-2025-65073)
* OpenStack Keystone: OpenStack Keystone: Unauthorized cross-project access due to improper validation in EC2 credential creation (CVE-2026-43001)
* openstack-keystone: OpenStack Keystone: Privilege escalation through EC2 credential creation (CVE-2026-33551)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
207 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
Known not affected
212 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Threats
Impact
Important
A flaw was found in OpenStack Keystone. This vulnerability allows an attacker to obtain a valid OpenStack's Keystone token, leading to access to unauthorized resources or privilege escalation within the OpenStack instance via sending a valid AWS (Amazon Web Services) signature to the /v3/ec2tokens or /v3/s3tokens API (Application Programming Interface) endpoints.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
216 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
Known not affected
212 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Threats
Impact
Moderate
A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Vendor Fix
fix
|
Known not affected
211 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Threats
Impact
Important
A flaw in OpenStack Nova’s interaction with the qemu-img utility allows an authenticated user to overwrite arbitrary files on the compute host. This occurs because Nova invokes qemu-img without strictly constraining the disk image format, enabling a malicious user to craft a QCOW2 header on a raw disk and trigger destructive behavior during instance operations such as resize.
7.1 (High)
Affected products
Fixed
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
206 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
207 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
207 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
214 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
Known not affected
207 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
212 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
212 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
Known not affected
207 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
212 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in etcd, a distributed key-value store. Unauthorized users can bypass authentication or authorization checks when the gRPC API is exposed to untrusted clients. This allows them to access sensitive cluster topology information, disrupt operations through alarms, interfere with lease management, and trigger data compaction, leading to permanent data loss and disruption of critical workflows. This vulnerability can result in information disclosure and denial of service.
7.7 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
212 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in OpenStack Keystone. An authenticated user with a reader role can exploit a vulnerability in the EC2 credential creation endpoint. By using a restricted application credential to call the EC2 credential creation API, the user may obtain EC2/S3 credentials that carry the full set of the parent user's S3 permissions. This effectively bypasses the role restrictions imposed on the application credential, leading to unauthorized access and privilege escalation. This issue affects deployments that use restricted application credentials in combination with the EC2/S3 compatibility API.
CWE-266 - Incorrect Privilege AssignmentAffected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Vendor Fix
fix
|
Known not affected
216 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Threats
Impact
Low
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
Known not affected
207 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
207 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in OpenStack Glance. An authenticated user can exploit a Server-Side Request Forgery (SSRF) vulnerability within the web-download import feature. This vulnerability stems from inadequate validation of Uniform Resource Identifiers (URIs), which can be circumvented using HTTP redirects or alternative IP encodings. Successful exploitation allows an attacker to gain unauthorized access to internal network resources and potentially exfiltrate sensitive data.
7.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
216 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
212 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Erlang OTP's public_key module. This vulnerability (CWE-295), related to improper certificate validation, allows a non-Certificate Authority (CA) certificate to be accepted as an intermediate issuer. A remote attacker, holding an end-entity certificate issued by a trusted CA, can exploit this by forging leaf certificates for arbitrary identities. This can lead to compromised server identity verification on the client side and client certificate verification on mutual Transport Layer Security (mTLS) servers, undermining the trust in certificate-based authentication.
8.0 (High)
Affected products
Fixed
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
158 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Erlang OTP public_key. This improper certificate validation vulnerability allows a subordinate Certificate Authority (CA) with restricted DNS nameConstraints to bypass these restrictions. By issuing a leaf certificate that lacks a Subject Alternative Name (SAN) but contains a crafted CommonName (CN), an attacker can trick an Erlang OTP TLS client into accepting it as valid for an out-of-scope hostname. This can lead to hostname spoofing and potential man-in-the-middle attacks, compromising the integrity and confidentiality of communications.
7.4 (High)
Affected products
Fixed
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
158 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in OpenStack Keystone. An attacker holding an unrestricted application credential could exploit a vulnerability in the POST /v3/credentials endpoint where the caller-supplied project_id for an EC2-type credential was not validated against the project of the authenticating application credential. This allows the attacker to create an EC2 credential targeting a different project. Subsequently, a /v3/ec2tokens exchange would issue a Keystone token scoped to the targeted project, enabling unauthorized cross-project access and lateral movement within the credential owner's role footprint.
8.0 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
216 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in OpenStack oslo.messaging. The RabbitMQ driver does not properly verify the hostname of the message broker when establishing a TLS (Transport Layer Security) connection. An attacker capable of intercepting control-plane network traffic can exploit this vulnerability to impersonate the RabbitMQ broker. This allows the attacker to perform a man-in-the-middle attack, potentially leading to the disclosure or manipulation of sensitive RPC (Remote Procedure Call) and notification traffic.
7.4 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
213 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
References
199 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat OpenStack Platform 16.2 (Train) is now available.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service (IaaS) cloud running on commonly available physical hardware.\n\nSecurity Fix(es):\n\n* crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)\n\n* openstack-nova-compute: Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling in OpenStack Nova (CVE-2026-24708)\n\n* pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490)\n\n* golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)\n\n* crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption (CVE-2025-68121)\n\n* openstack-glance: OpenStack Glance: Server-Side Request Forgery leading to unauthorized internal network access (CVE-2026-34881)\n\n* crypto/x509: Incorrect enforcement of email constraints in crypto/x509 (CVE-2026-27137)\n\n* net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)\n\n* etcd: etcd: Authorization bypass allows information disclosure and denial of service (CVE-2026-33413)\n\n* crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)\n\n* crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810)\n\n* golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282)\n\n* crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)\n\n* crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)\n\n* net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n\n* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n\n* erlang: Erlang OTP public_key: Certificate chain forgery via improper trust chain validation (CVE-2026-42789)\n\n* crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)\n\n* oslo.messaging: openstack: OpenStack oslo.messaging: Man-in-the-middle attack via improper TLS hostname verification (CVE-2026-44393)\n\n* erlang: Erlang OTP public_key: Certificate validation bypass allows hostname spoofing (CVE-2026-42790)\n\n* openstack-keystone: OpenStack Keystone: Unauthorized access and privilege escalation via AWS signature validation flaw (CVE-2025-65073)\n\n* OpenStack Keystone: OpenStack Keystone: Unauthorized cross-project access due to improper validation in EC2 credential creation (CVE-2026-43001)\n\n* openstack-keystone: OpenStack Keystone: Privilege escalation through EC2 credential creation (CVE-2026-33551)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:54757",
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2415344",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2415344"
},
{
"category": "external",
"summary": "2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "2430312",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430312"
},
{
"category": "external",
"summary": "2430472",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430472"
},
{
"category": "external",
"summary": "2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "2440368",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2440368"
},
{
"category": "external",
"summary": "2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "2451037",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451037"
},
{
"category": "external",
"summary": "2451728",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451728"
},
{
"category": "external",
"summary": "2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "2464305",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464305"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "2482093",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482093"
},
{
"category": "external",
"summary": "2482286",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482286"
},
{
"category": "external",
"summary": "2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "2484835",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484835"
},
{
"category": "external",
"summary": "OSPRH-20808",
"url": "https://issues.redhat.com/browse/OSPRH-20808"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54757.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 security advisory",
"tracking": {
"current_release_date": "2026-08-21T13:15:11+00:00",
"generator": {
"date": "2026-08-21T13:15:11+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:54757",
"initial_release_date": "2026-08-13T23:45:16+00:00",
"revision_history": [
{
"date": "2026-08-13T23:45:16+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-13T23:45:16+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-21T13:15:11+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 16.2",
"product": {
"name": "Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:16.2::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 16.2",
"product": {
"name": "Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-CINDERLIB-16.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:16.2::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 16.2",
"product": {
"name": "Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:16.2::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 16.2",
"product": {
"name": "Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-TOOLS-16.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:16.2::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"product": {
"name": "collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"product_id": "collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/collectd-sensubility@0.2.1-1.1.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-pyasn1-0:0.4.6-4.el8ost.src",
"product": {
"name": "python-pyasn1-0:0.4.6-4.el8ost.src",
"product_id": "python-pyasn1-0:0.4.6-4.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pyasn1@0.4.6-4.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "erlang-0:23.3.4.18-2.el8ost.src",
"product": {
"name": "erlang-0:23.3.4.18-2.el8ost.src",
"product_id": "erlang-0:23.3.4.18-2.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang@23.3.4.18-2.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"product": {
"name": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"product_id": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-glance@19.0.5-2.20260512165254.eb6ad61.el8ost?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"product": {
"name": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"product_id": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-cinder@15.6.1-2.20250708154832.299553a.el8ost?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"product": {
"name": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"product_id": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova@20.6.2-2.20260317135026.8a24acd.el8ost?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"product": {
"name": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"product_id": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tripleo-common@11.7.1-2.20251029134905.e189622.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"product": {
"name": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"product_id": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-haproxy@4.1.1-2.20250728141134.df96ffc.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"product": {
"name": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"product_id": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-git@0.5.0-2.20250728140843.4e4498e.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"product": {
"name": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"product_id": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-keystone@16.0.3-2.20260616134936.9d699a7.el8ost?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"product": {
"name": "openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"product_id": "openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-swift@2.23.4-2.20260121154927.70b68db.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"product": {
"name": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"product_id": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-inifile@3.1.1-2.20250728133040.91efced.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"product": {
"name": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"product_id": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-module-data@0.5.1-2.20250728142646.28dafce.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"product": {
"name": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"product_id": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-apache@5.1.1-2.20250728133931.1fa9b1c.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"product": {
"name": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"product_id": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-java@5.0.2-2.20250804144904.e57cbc8.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"product": {
"name": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"product_id": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-corosync@6.0.2-2.20250728134759.961add3.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"product": {
"name": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"product_id": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-datacat@0.6.3-2.20250728140400.5cce8f2.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"product": {
"name": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"product_id": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tripleo-heat-templates@11.6.1-2.20251125134914.9adcac6.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"product": {
"name": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"product_id": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tempest@26.1.0-2.20250728145114.271f820.el8ost?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"product": {
"name": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"product_id": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-firewall@3.4.1-2.20250728144450.94f707c.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"product": {
"name": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"product_id": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-concat@6.1.1-2.20250728133127.9baa8fc.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"product": {
"name": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"product_id": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-ipaclient@2.5.2-2.20250728141812.b086731.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"product": {
"name": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"product_id": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-keepalived@0.0.2-2.20250728142002.bbca37a.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"product": {
"name": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"product_id": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-stdlib@6.1.1-2.20250728131928.5aa891c.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"product": {
"name": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"product_id": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-rabbitmq@10.1.2-2.20250728144344.8b9b006.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"product": {
"name": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"product_id": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-remote@10.0.0-2.20250728135533.7420908.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"product": {
"name": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"product_id": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-staging@1.0.5-2.20250728134218.b466d93.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"product": {
"name": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"product_id": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-snmp@3.9.1-2.20250728142735.5d73485.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"product": {
"name": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"product_id": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-vcsrepo@3.0.1-2.20250728140014.b06d5d3.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"product": {
"name": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"product_id": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-tomcat@3.1.1-2.20250804144904.a3f92d1.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"product": {
"name": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"product_id": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-xinetd@3.3.1-2.20250728135145.d768da2.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"product": {
"name": "python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"product_id": "python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-collectd-gnocchi@1.7.2-2.20250728143604.de115a7.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"product": {
"name": "python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"product_id": "python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-gnocchiclient@7.0.4-2.20250728131928.64814b9.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"product": {
"name": "python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"product_id": "python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-oslo-messaging@10.2.4-2.20260710155333.82281a0.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"product": {
"name": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"product_id": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tripleo-ansible@0.8.1-2.20260112154909.123ce73.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "etcd-0:3.3.23-22.el8ost.src",
"product": {
"name": "etcd-0:3.3.23-22.el8ost.src",
"product_id": "etcd-0:3.3.23-22.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/etcd@3.3.23-22.el8ost?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"product": {
"name": "collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"product_id": "collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/collectd-sensubility@0.2.1-1.1.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"product": {
"name": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"product_id": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/collectd-sensubility-debuginfo@0.2.1-1.1.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-asn1@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-compiler@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-crypto@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-eldap@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-erts@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-hipe@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-inets@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-kernel@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-mnesia@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-os_mon@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-parsetools@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-public_key@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-runtime_tools@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-sasl@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-snmp@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-ssl@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-stdlib@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-syntax_tools@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-tools@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-xmerl@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-debugsource@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-asn1-debuginfo@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-crypto-debuginfo@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-debuginfo@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-erl_interface-debuginfo@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-erts-debuginfo@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-odbc-debuginfo@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-os_mon-debuginfo@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-runtime_tools-debuginfo@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-tools-debuginfo@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "etcd-0:3.3.23-22.el8ost.x86_64",
"product": {
"name": "etcd-0:3.3.23-22.el8ost.x86_64",
"product_id": "etcd-0:3.3.23-22.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/etcd@3.3.23-22.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"product": {
"name": "etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"product_id": "etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/etcd-debugsource@3.3.23-22.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"product": {
"name": "etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"product_id": "etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/etcd-debuginfo@3.3.23-22.el8ost?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"product": {
"name": "collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"product_id": "collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/collectd-sensubility@0.2.1-1.1.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"product": {
"name": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"product_id": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/collectd-sensubility-debuginfo@0.2.1-1.1.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-asn1@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-compiler@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-crypto@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-eldap@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-erts@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-hipe@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-inets@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-kernel@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-mnesia@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-os_mon@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-parsetools@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-public_key@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-runtime_tools@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-sasl@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-snmp@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-ssl@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-stdlib@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-syntax_tools@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-tools@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-xmerl@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-debugsource@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-asn1-debuginfo@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-crypto-debuginfo@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-debuginfo@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-erl_interface-debuginfo@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-erts-debuginfo@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-odbc-debuginfo@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-os_mon-debuginfo@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-runtime_tools-debuginfo@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-tools-debuginfo@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "etcd-0:3.3.23-22.el8ost.ppc64le",
"product": {
"name": "etcd-0:3.3.23-22.el8ost.ppc64le",
"product_id": "etcd-0:3.3.23-22.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/etcd@3.3.23-22.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"product": {
"name": "etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"product_id": "etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/etcd-debugsource@3.3.23-22.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"product": {
"name": "etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"product_id": "etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/etcd-debuginfo@3.3.23-22.el8ost?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"product": {
"name": "python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"product_id": "python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-pyasn1@0.4.6-4.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"product": {
"name": "python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"product_id": "python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-pyasn1-modules@0.4.6-4.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"product": {
"name": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"product_id": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-glance@19.0.5-2.20260512165254.eb6ad61.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"product": {
"name": "python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"product_id": "python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-glance@19.0.5-2.20260512165254.eb6ad61.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"product": {
"name": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"product_id": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-cinder@15.6.1-2.20250708154832.299553a.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"product": {
"name": "python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"product_id": "python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-cinder@15.6.1-2.20250708154832.299553a.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-api@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-common@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-compute@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-conductor@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-console@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-migration@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-novncproxy@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-scheduler@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-serialproxy@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-spicehtml5proxy@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-nova@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product": {
"name": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_id": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tripleo-common@11.7.1-2.20251029134905.e189622.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product": {
"name": "openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_id": "openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tripleo-common-container-base@11.7.1-2.20251029134905.e189622.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product": {
"name": "openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_id": "openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tripleo-common-containers@11.7.1-2.20251029134905.e189622.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product": {
"name": "openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_id": "openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tripleo-common-devtools@11.7.1-2.20251029134905.e189622.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product": {
"name": "python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_id": "python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-tripleo-common@11.7.1-2.20251029134905.e189622.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"product": {
"name": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"product_id": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-haproxy@4.1.1-2.20250728141134.df96ffc.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"product": {
"name": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"product_id": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-git@0.5.0-2.20250728140843.4e4498e.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"product": {
"name": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"product_id": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-keystone@16.0.3-2.20260616134936.9d699a7.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"product": {
"name": "python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"product_id": "python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-keystone@16.0.3-2.20260616134936.9d699a7.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product": {
"name": "openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_id": "openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-swift-account@2.23.4-2.20260121154927.70b68db.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product": {
"name": "openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_id": "openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-swift-container@2.23.4-2.20260121154927.70b68db.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product": {
"name": "openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_id": "openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-swift-object@2.23.4-2.20260121154927.70b68db.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product": {
"name": "openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_id": "openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-swift-proxy@2.23.4-2.20260121154927.70b68db.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product": {
"name": "python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_id": "python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-swift@2.23.4-2.20260121154927.70b68db.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"product": {
"name": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"product_id": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-inifile@3.1.1-2.20250728133040.91efced.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"product": {
"name": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"product_id": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-module-data@0.5.1-2.20250728142646.28dafce.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"product": {
"name": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"product_id": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-apache@5.1.1-2.20250728133931.1fa9b1c.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"product": {
"name": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"product_id": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-java@5.0.2-2.20250804144904.e57cbc8.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"product": {
"name": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"product_id": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-corosync@6.0.2-2.20250728134759.961add3.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"product": {
"name": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"product_id": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-datacat@0.6.3-2.20250728140400.5cce8f2.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"product": {
"name": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"product_id": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tripleo-heat-templates@11.6.1-2.20251125134914.9adcac6.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product": {
"name": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product_id": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tempest@26.1.0-2.20250728145114.271f820.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product": {
"name": "openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product_id": "openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tempest-all@26.1.0-2.20250728145114.271f820.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product": {
"name": "python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product_id": "python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-tempest@26.1.0-2.20250728145114.271f820.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product": {
"name": "python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product_id": "python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-tempest-tests@26.1.0-2.20250728145114.271f820.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"product": {
"name": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"product_id": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-firewall@3.4.1-2.20250728144450.94f707c.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"product": {
"name": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"product_id": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-concat@6.1.1-2.20250728133127.9baa8fc.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"product": {
"name": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"product_id": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-ipaclient@2.5.2-2.20250728141812.b086731.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"product": {
"name": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"product_id": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-keepalived@0.0.2-2.20250728142002.bbca37a.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"product": {
"name": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"product_id": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-stdlib@6.1.1-2.20250728131928.5aa891c.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"product": {
"name": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"product_id": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-rabbitmq@10.1.2-2.20250728144344.8b9b006.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"product": {
"name": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"product_id": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-remote@10.0.0-2.20250728135533.7420908.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"product": {
"name": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"product_id": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-staging@1.0.5-2.20250728134218.b466d93.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"product": {
"name": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"product_id": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-snmp@3.9.1-2.20250728142735.5d73485.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"product": {
"name": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"product_id": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-vcsrepo@3.0.1-2.20250728140014.b06d5d3.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"product": {
"name": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"product_id": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-tomcat@3.1.1-2.20250804144904.a3f92d1.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"product": {
"name": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"product_id": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-xinetd@3.3.1-2.20250728135145.d768da2.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"product": {
"name": "python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"product_id": "python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-collectd-gnocchi@1.7.2-2.20250728143604.de115a7.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"product": {
"name": "python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"product_id": "python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-gnocchiclient@7.0.4-2.20250728131928.64814b9.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"product": {
"name": "python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"product_id": "python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-oslo-messaging@10.2.4-2.20260710155333.82281a0.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"product": {
"name": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"product_id": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tripleo-ansible@0.8.1-2.20260112154909.123ce73.el8ost?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le"
},
"product_reference": "collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "collectd-sensubility-0:0.2.1-1.1.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src"
},
"product_reference": "collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64"
},
"product_reference": "collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le"
},
"product_reference": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64"
},
"product_reference": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-0:23.3.4.18-2.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src"
},
"product_reference": "erlang-0:23.3.4.18-2.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-erts-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-erts-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-inets-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-inets-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-tools-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-tools-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-0:3.3.23-22.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le"
},
"product_reference": "etcd-0:3.3.23-22.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-0:3.3.23-22.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src"
},
"product_reference": "etcd-0:3.3.23-22.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-0:3.3.23-22.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64"
},
"product_reference": "etcd-0:3.3.23-22.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le"
},
"product_reference": "etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64"
},
"product_reference": "etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-debugsource-0:3.3.23-22.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le"
},
"product_reference": "etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-debugsource-0:3.3.23-22.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
},
"product_reference": "etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch"
},
"product_reference": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src"
},
"product_reference": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch"
},
"product_reference": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src"
},
"product_reference": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch"
},
"product_reference": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src"
},
"product_reference": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src"
},
"product_reference": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src"
},
"product_reference": "openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch"
},
"product_reference": "openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch"
},
"product_reference": "openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch"
},
"product_reference": "openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch"
},
"product_reference": "openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch"
},
"product_reference": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src"
},
"product_reference": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch"
},
"product_reference": "openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch"
},
"product_reference": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src"
},
"product_reference": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch"
},
"product_reference": "openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch"
},
"product_reference": "openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch"
},
"product_reference": "openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch"
},
"product_reference": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src"
},
"product_reference": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch"
},
"product_reference": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src"
},
"product_reference": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch"
},
"product_reference": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src"
},
"product_reference": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch"
},
"product_reference": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src"
},
"product_reference": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch"
},
"product_reference": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src"
},
"product_reference": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch"
},
"product_reference": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src"
},
"product_reference": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch"
},
"product_reference": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src"
},
"product_reference": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch"
},
"product_reference": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src"
},
"product_reference": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch"
},
"product_reference": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src"
},
"product_reference": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch"
},
"product_reference": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src"
},
"product_reference": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch"
},
"product_reference": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src"
},
"product_reference": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch"
},
"product_reference": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src"
},
"product_reference": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch"
},
"product_reference": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src"
},
"product_reference": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch"
},
"product_reference": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src"
},
"product_reference": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch"
},
"product_reference": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src"
},
"product_reference": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch"
},
"product_reference": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src"
},
"product_reference": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch"
},
"product_reference": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src"
},
"product_reference": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch"
},
"product_reference": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src"
},
"product_reference": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch"
},
"product_reference": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src"
},
"product_reference": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch"
},
"product_reference": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src"
},
"product_reference": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch"
},
"product_reference": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src"
},
"product_reference": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src"
},
"product_reference": "python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src"
},
"product_reference": "python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src"
},
"product_reference": "python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pyasn1-0:0.4.6-4.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src"
},
"product_reference": "python-pyasn1-0:0.4.6-4.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch"
},
"product_reference": "python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch"
},
"product_reference": "python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch"
},
"product_reference": "python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch"
},
"product_reference": "python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch"
},
"product_reference": "python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
},
"product_reference": "python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-pyasn1-0:0.4.6-4.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch"
},
"product_reference": "python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch"
},
"product_reference": "python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch"
},
"product_reference": "python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch"
},
"product_reference": "python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch"
},
"product_reference": "python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch"
},
"product_reference": "python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch"
},
"product_reference": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src"
},
"product_reference": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch"
},
"product_reference": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-CINDERLIB-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src"
},
"product_reference": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-CINDERLIB-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src"
},
"product_reference": "python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-CINDERLIB-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pyasn1-0:0.4.6-4.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src"
},
"product_reference": "python-pyasn1-0:0.4.6-4.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-CINDERLIB-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch"
},
"product_reference": "python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-CINDERLIB-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
},
"product_reference": "python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-CINDERLIB-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-pyasn1-0:0.4.6-4.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch"
},
"product_reference": "python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-CINDERLIB-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch"
},
"product_reference": "python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-CINDERLIB-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch"
},
"product_reference": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src"
},
"product_reference": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch"
},
"product_reference": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src"
},
"product_reference": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch"
},
"product_reference": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src"
},
"product_reference": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch"
},
"product_reference": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src"
},
"product_reference": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch"
},
"product_reference": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src"
},
"product_reference": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch"
},
"product_reference": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src"
},
"product_reference": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch"
},
"product_reference": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src"
},
"product_reference": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch"
},
"product_reference": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src"
},
"product_reference": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch"
},
"product_reference": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src"
},
"product_reference": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch"
},
"product_reference": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src"
},
"product_reference": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch"
},
"product_reference": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src"
},
"product_reference": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch"
},
"product_reference": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src"
},
"product_reference": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch"
},
"product_reference": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src"
},
"product_reference": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch"
},
"product_reference": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src"
},
"product_reference": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch"
},
"product_reference": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src"
},
"product_reference": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch"
},
"product_reference": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src"
},
"product_reference": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch"
},
"product_reference": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src"
},
"product_reference": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch"
},
"product_reference": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src"
},
"product_reference": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch"
},
"product_reference": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src"
},
"product_reference": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch"
},
"product_reference": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src"
},
"product_reference": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pyasn1-0:0.4.6-4.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src"
},
"product_reference": "python-pyasn1-0:0.4.6-4.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-pyasn1-0:0.4.6-4.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch"
},
"product_reference": "python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src"
},
"product_reference": "python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src"
},
"product_reference": "python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch"
},
"product_reference": "python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
},
"product_reference": "python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-TOOLS-16.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-65073",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"discovery_date": "2025-11-17T08:00:54.372992+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2415344"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenStack Keystone. This vulnerability allows an attacker to obtain a valid OpenStack\u0027s Keystone token, leading to access to unauthorized resources or privilege escalation within the OpenStack instance via sending a valid AWS (Amazon Web Services) signature to the /v3/ec2tokens or /v3/s3tokens API (Application Programming Interface) endpoints.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openstack-keystone: OpenStack Keystone: Unauthorized access and privilege escalation via AWS signature validation flaw",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability allows an attacker to obtain a valid OpenStack\u0027s Keystone token belonging to a valid user by sending a valid AWS signature to the /v3/ec2tokens or /v3/s3tokens API\u0027s endpoints, leading to access to unauthorized resources or privilege escalation within the OpenStack instance.\n\nThis attack is considered to have a high complexity (AC:H) due to the fact of obtaining such valid AWS token is not straight forward. To be considered vulnerable, the OpenStack deployments should expose the related API end points through a public API or external access.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-65073"
},
{
"category": "external",
"summary": "RHBZ#2415344",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2415344"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-65073",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-65073"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-65073",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-65073"
},
{
"category": "external",
"summary": "https://security.openstack.org/ossa/OSSA-2025-002.html",
"url": "https://security.openstack.org/ossa/OSSA-2025-002.html"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2025/11/04/2",
"url": "https://www.openwall.com/lists/oss-security/2025/11/04/2"
}
],
"release_date": "2025-11-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openstack-keystone: OpenStack Keystone: Unauthorized access and privilege escalation via AWS signature validation flaw"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2026-23490",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-16T20:03:33.790513+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2430472"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23490"
},
{
"category": "external",
"summary": "RHBZ#2430472",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430472"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23490",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23490"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970",
"url": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2",
"url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq"
}
],
"release_date": "2026-01-16T19:03:36.442000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID"
},
{
"acknowledgments": [
{
"names": [
"Dan Smith"
],
"organization": "RedHat"
}
],
"cve": "CVE-2026-24708",
"cwe": {
"id": "CWE-73",
"name": "External Control of File Name or Path"
},
"discovery_date": "2026-01-16T06:29:23.249000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2430312"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in OpenStack Nova\u2019s interaction with the qemu-img utility allows an authenticated user to overwrite arbitrary files on the compute host. This occurs because Nova invokes qemu-img without strictly constraining the disk image format, enabling a malicious user to craft a QCOW2 header on a raw disk and trigger destructive behavior during instance operations such as resize.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openstack-nova-compute: Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling in OpenStack Nova",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat OpenStack Platform. An authenticated attacker can exploit unconstrained disk format handling in OpenStack Nova when invoking qemu-img. By crafting a QCOW2 header on an ephemeral or root disk, an attacker can cause qemu-img to overwrite arbitrary files on the compute host with Nova\u0027s write access, leading to data destruction or denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-24708"
},
{
"category": "external",
"summary": "RHBZ#2430312",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430312"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-24708",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24708"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-24708",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24708"
},
{
"category": "external",
"summary": "https://bugs.launchpad.net/nova/+bug/2137507",
"url": "https://bugs.launchpad.net/nova/+bug/2137507"
}
],
"release_date": "2026-02-17T15:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openstack-nova-compute: Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling in OpenStack Nova"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33413",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"discovery_date": "2026-03-26T14:03:01.896580+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451728"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in etcd, a distributed key-value store. Unauthorized users can bypass authentication or authorization checks when the gRPC API is exposed to untrusted clients. This allows them to access sensitive cluster topology information, disrupt operations through alarms, interfere with lease management, and trigger data compaction, leading to permanent data loss and disruption of critical workflows. This vulnerability can result in information disclosure and denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "etcd: etcd: Authorization bypass allows information disclosure and denial of service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw in etcd allows unauthorized users to bypass authentication or authorization checks when the gRPC API is exposed to untrusted clients and etcd\u0027s built-in authentication is enabled. This can lead to information disclosure and denial of service. Typical Red Hat OpenShift Container Platform and Kubernetes deployments are not affected, as the Kubernetes API server handles authentication and authorization independently of etcd\u0027s internal mechanisms.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33413"
},
{
"category": "external",
"summary": "RHBZ#2451728",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451728"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33413",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33413"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33413",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33413"
},
{
"category": "external",
"summary": "https://github.com/etcd-io/etcd/security/advisories/GHSA-q8m4-xhhv-38mg",
"url": "https://github.com/etcd-io/etcd/security/advisories/GHSA-q8m4-xhhv-38mg"
}
],
"release_date": "2026-03-26T13:36:10.919000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Restrict network access to etcd server ports to ensure only trusted components can establish connections. Implement strong client identity at the transport layer, such as mTLS, with tightly scoped client certificate distribution. This will limit unauthorized access to etcd functions.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "etcd: etcd: Authorization bypass allows information disclosure and denial of service"
},
{
"acknowledgments": [
{
"names": [
"Maxence Bornecque"
],
"organization": "Orange Cyberdefense CERT Vulnerability Intelligence Watch Team"
}
],
"cve": "CVE-2026-33551",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"discovery_date": "2026-03-24T23:40:47.060000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451037"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenStack Keystone. An authenticated user with a reader role can exploit a vulnerability in the EC2 credential creation endpoint. By using a restricted application credential to call the EC2 credential creation API, the user may obtain EC2/S3 credentials that carry the full set of the parent user\u0027s S3 permissions. This effectively bypasses the role restrictions imposed on the application credential, leading to unauthorized access and privilege escalation. This issue affects deployments that use restricted application credentials in combination with the EC2/S3 compatibility API.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openstack-keystone: OpenStack Keystone: Privilege escalation through EC2 credential creation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33551"
},
{
"category": "external",
"summary": "RHBZ#2451037",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451037"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33551",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33551"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33551",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33551"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2026/04/07/12",
"url": "http://www.openwall.com/lists/oss-security/2026/04/07/12"
},
{
"category": "external",
"summary": "https://security.openstack.org/ossa/OSSA-2026-005.html",
"url": "https://security.openstack.org/ossa/OSSA-2026-005.html"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2026/04/07/12",
"url": "https://www.openwall.com/lists/oss-security/2026/04/07/12"
}
],
"release_date": "2026-04-07T15:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openstack-keystone: OpenStack Keystone: Privilege escalation through EC2 credential creation"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"acknowledgments": [
{
"names": [
"Hyeongeun_Ji"
],
"organization": "Open the Window"
},
{
"names": [
"Abhishek Kekane"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-34881",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-02-17T13:36:28.695000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2440368"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenStack Glance. An authenticated user can exploit a Server-Side Request Forgery (SSRF) vulnerability within the web-download import feature. This vulnerability stems from inadequate validation of Uniform Resource Identifiers (URIs), which can be circumvented using HTTP redirects or alternative IP encodings. Successful exploitation allows an attacker to gain unauthorized access to internal network resources and potentially exfiltrate sensitive data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openstack-glance: OpenStack Glance: Server-Side Request Forgery leading to unauthorized internal network access",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an IMPORTANT flaw in OpenStack Glance\u0027s web-download import feature allows an authenticated user to perform Server-Side Request Forgery (SSRF). The vulnerability arises from insufficient validation of URIs, which can be bypassed through HTTP redirects or alternative IP encodings. This enables an attacker to access internal network resources and potentially exfiltrate sensitive information within the cloud environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34881"
},
{
"category": "external",
"summary": "RHBZ#2440368",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2440368"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34881",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34881"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34881",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34881"
},
{
"category": "external",
"summary": "https://bugs.launchpad.net/glance/+bug/2138602",
"url": "https://bugs.launchpad.net/glance/+bug/2138602"
}
],
"release_date": "2026-03-25T20:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openstack-glance: OpenStack Glance: Server-Side Request Forgery leading to unauthorized internal network access"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42789",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-27T15:10:36.175135+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482093"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Erlang OTP\u0027s public_key module. This vulnerability (CWE-295), related to improper certificate validation, allows a non-Certificate Authority (CA) certificate to be accepted as an intermediate issuer. A remote attacker, holding an end-entity certificate issued by a trusted CA, can exploit this by forging leaf certificates for arbitrary identities. This can lead to compromised server identity verification on the client side and client certificate verification on mutual Transport Layer Security (mTLS) servers, undermining the trust in certificate-based authentication.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "erlang: Erlang OTP public_key: Certificate chain forgery via improper trust chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability where Erlang OTP\u0027s `public_key` module improperly validates certificate chains. A remote attacker with an existing end-entity certificate from a trusted Certificate Authority can forge new leaf certificates, leading to compromised server or client identity verification in TLS/mTLS connections. This impacts applications within Red Hat OpenStack Platform and Community Projects that utilize the default verifier in the OTP `ssl` application. Because an attacker must be able to create or locate a certificate with specific attributes, Red Hat assesses the impact of this vulnerability as Important.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42789"
},
{
"category": "external",
"summary": "RHBZ#2482093",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482093"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42789",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42789"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42789",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42789"
},
{
"category": "external",
"summary": "https://cna.erlef.org/cves/CVE-2026-42789.html",
"url": "https://cna.erlef.org/cves/CVE-2026-42789.html"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/471cd2f664300a95353c467873800bbe706005db",
"url": "https://github.com/erlang/otp/commit/471cd2f664300a95353c467873800bbe706005db"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/59c8d824386b2eb1614ff9340624843ef6aca0fd",
"url": "https://github.com/erlang/otp/commit/59c8d824386b2eb1614ff9340624843ef6aca0fd"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/security/advisories/GHSA-c99q-jmpx-v8qq",
"url": "https://github.com/erlang/otp/security/advisories/GHSA-c99q-jmpx-v8qq"
},
{
"category": "external",
"summary": "https://osv.dev/vulnerability/EEF-CVE-2026-42789",
"url": "https://osv.dev/vulnerability/EEF-CVE-2026-42789"
},
{
"category": "external",
"summary": "https://www.erlang.org/doc/system/versions.html#order-of-versions",
"url": "https://www.erlang.org/doc/system/versions.html#order-of-versions"
}
],
"release_date": "2026-05-27T12:23:06.355000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "erlang: Erlang OTP public_key: Certificate chain forgery via improper trust chain validation"
},
{
"cve": "CVE-2026-42790",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-27T17:02:53.354271+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482286"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Erlang OTP public_key. This improper certificate validation vulnerability allows a subordinate Certificate Authority (CA) with restricted DNS nameConstraints to bypass these restrictions. By issuing a leaf certificate that lacks a Subject Alternative Name (SAN) but contains a crafted CommonName (CN), an attacker can trick an Erlang OTP TLS client into accepting it as valid for an out-of-scope hostname. This can lead to hostname spoofing and potential man-in-the-middle attacks, compromising the integrity and confidentiality of communications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "erlang: Erlang OTP public_key: Certificate validation bypass allows hostname spoofing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Erlang OTP\u0027s public_key module allows a subordinate Certificate Authority to bypass DNS name constraints during TLS hostname verification. An attacker could exploit this by issuing a specially crafted certificate lacking a Subject Alternative Name but containing a malicious CommonName, enabling hostname spoofing and potential man-in-the-middle attacks against Red Hat products acting as Erlang OTP TLS clients.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42790"
},
{
"category": "external",
"summary": "RHBZ#2482286",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482286"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42790",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42790"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42790",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42790"
},
{
"category": "external",
"summary": "https://cna.erlef.org/cves/CVE-2026-42790.html",
"url": "https://cna.erlef.org/cves/CVE-2026-42790.html"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/0769050c69d73762672b0db1347b6993a5b31759",
"url": "https://github.com/erlang/otp/commit/0769050c69d73762672b0db1347b6993a5b31759"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/21abed64eb2026b5f82f432709e4e932f9be389a",
"url": "https://github.com/erlang/otp/commit/21abed64eb2026b5f82f432709e4e932f9be389a"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/fb67c6d1836f51105a96d8b769e71e4215a79457",
"url": "https://github.com/erlang/otp/commit/fb67c6d1836f51105a96d8b769e71e4215a79457"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/security/advisories/GHSA-22cw-4ph4-6447",
"url": "https://github.com/erlang/otp/security/advisories/GHSA-22cw-4ph4-6447"
},
{
"category": "external",
"summary": "https://osv.dev/vulnerability/EEF-CVE-2026-42790",
"url": "https://osv.dev/vulnerability/EEF-CVE-2026-42790"
},
{
"category": "external",
"summary": "https://www.erlang.org/doc/system/versions.html#order-of-versions",
"url": "https://www.erlang.org/doc/system/versions.html#order-of-versions"
}
],
"release_date": "2026-05-27T15:09:01.860000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Ensure all TLS certificates used in the deployment include Subject Alternative Name (SAN) extensions with the appropriate DNS entries. Certificates relying solely on the CommonName (CN) field for hostname identification are susceptible to this bypass. For Erlang applications, the verify_fun option in the ssl module can be configured to reject peer certificates missing the subjectAltName extension.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "erlang: Erlang OTP public_key: Certificate validation bypass allows hostname spoofing"
},
{
"cve": "CVE-2026-43001",
"cwe": {
"id": "CWE-1288",
"name": "Improper Validation of Consistency within Input"
},
"discovery_date": "2026-05-01T09:00:55.408726+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2464305"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenStack Keystone. An attacker holding an unrestricted application credential could exploit a vulnerability in the POST /v3/credentials endpoint where the caller-supplied project_id for an EC2-type credential was not validated against the project of the authenticating application credential. This allows the attacker to create an EC2 credential targeting a different project. Subsequently, a /v3/ec2tokens exchange would issue a Keystone token scoped to the targeted project, enabling unauthorized cross-project access and lateral movement within the credential owner\u0027s role footprint.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenStack Keystone: OpenStack Keystone: Unauthorized cross-project access due to improper validation in EC2 credential creation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw in OpenStack Keystone allows an attacker with an unrestricted application credential to bypass project isolation. By exploiting improper validation during EC2 credential creation, an attacker can gain unauthorized access and move laterally between projects within a Red Hat OpenStack Platform deployment, compromising multi-tenant security. If the roles from the original project the attacker holds a credential are compatible with the roles in the project the attacker is targeting, the attacker can perform the same actions granted permission from the initial project in the targeted project. Depending on the level of privileges the attacker has that means a high impact for confidentiality, availability and integrity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43001"
},
{
"category": "external",
"summary": "RHBZ#2464305",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464305"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43001",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43001"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43001",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43001"
},
{
"category": "external",
"summary": "https://bugs.launchpad.net/keystone/+bug/2149775",
"url": "https://bugs.launchpad.net/keystone/+bug/2149775"
},
{
"category": "external",
"summary": "https://review.opendev.org/c/openstack/keystone/+/985804",
"url": "https://review.opendev.org/c/openstack/keystone/+/985804"
}
],
"release_date": "2026-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "To reduce exposure, ensure that OpenStack application credentials are created with the most restrictive scope possible, limiting their permissions to only what is essential for their intended function. If EC2 credentials are not actively used within your OpenStack deployment, consider disabling the EC2 credential API endpoint in Keystone to prevent unauthorized creation of cross-project EC2 credentials. Refer to the OpenStack Keystone administration guide for detailed instructions on managing application credential scopes and disabling API endpoints. Any changes to Keystone configuration may require a service restart to take effect.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenStack Keystone: OpenStack Keystone: Unauthorized cross-project access due to improper validation in EC2 credential creation"
},
{
"cve": "CVE-2026-44393",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-06-04T16:01:33.285581+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484835"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenStack oslo.messaging. The RabbitMQ driver does not properly verify the hostname of the message broker when establishing a TLS (Transport Layer Security) connection. An attacker capable of intercepting control-plane network traffic can exploit this vulnerability to impersonate the RabbitMQ broker. This allows the attacker to perform a man-in-the-middle attack, potentially leading to the disclosure or manipulation of sensitive RPC (Remote Procedure Call) and notification traffic.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "oslo.messaging: openstack: OpenStack oslo.messaging: Man-in-the-middle attack via improper TLS hostname verification",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in OpenStack oslo.messaging impacts Red Hat OpenStack Platform and OpenShift Container Platform when using RabbitMQ with TLS. The vulnerability arises from the RabbitMQ driver\u0027s failure to perform proper hostname verification during TLS connection establishment. This oversight enables an attacker capable of intercepting control-plane network traffic to impersonate the RabbitMQ broker, potentially leading to man-in-the-middle attacks that compromise the confidentiality and integrity of sensitive RPC and notification data.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44393"
},
{
"category": "external",
"summary": "RHBZ#2484835",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484835"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44393",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44393"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44393",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44393"
},
{
"category": "external",
"summary": "https://bugs.launchpad.net/oslo.messaging/+bug/2150316",
"url": "https://bugs.launchpad.net/oslo.messaging/+bug/2150316"
},
{
"category": "external",
"summary": "https://wiki.openstack.org/wiki/OSSN/OSSN-0096",
"url": "https://wiki.openstack.org/wiki/OSSN/OSSN-0096"
}
],
"release_date": "2026-06-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "To mitigate the risk of man-in-the-middle attacks, restrict network access to the RabbitMQ message broker. Configure firewall rules to permit inbound connections to the RabbitMQ port (typically 5672 or 5671 for AMQPS) only from authorized hosts and services within the control plane. This operational measure reduces the exposure to attackers attempting to intercept and impersonate the broker.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "oslo.messaging: openstack: OpenStack oslo.messaging: Man-in-the-middle attack via improper TLS hostname verification"
}
]
}
RHSA-2026:5549
Vulnerability from csaf_redhat - Published: 2026-03-24 07:31 - Updated: 2026-08-21 12:23Summary
Red Hat Security Advisory: Red Hat OpenShift Builds 1.6.4
Severity
Important
Notes
Topic: Red Hat OpenShift Builds 1.6.4
Details: Releases of Red Hat OpenShift Builds 1.6.4
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A Go application processing a malicious archive can become unresponsive or crash, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le | — |
Workaround
|
Threats
Impact
Moderate
A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64 | — |
Vendor Fix
fix
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64 | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64 | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64 | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64 | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64 | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64 | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64 | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64 | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64 | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64 | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64 | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64 | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64 | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64 | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64 | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64 | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64 | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x | — | ||
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le | — |
Threats
Impact
Moderate
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le | — |
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64 | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x | — |
Workaround
|
|
| Unresolved product id: Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le | — |
Workaround
|
Threats
Impact
Important
References
54 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Builds 1.6.4",
"title": "Topic"
},
{
"category": "general",
"text": "Releases of Red Hat OpenShift Builds 1.6.4",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:5549",
"url": "https://access.redhat.com/errata/RHSA-2026:5549"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61726",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61728",
"url": "https://access.redhat.com/security/cve/CVE-2025-61728"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66471",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/builds_for_red_hat_openshift/1.6",
"url": "https://docs.redhat.com/en/documentation/builds_for_red_hat_openshift/1.6"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5549.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Builds 1.6.4",
"tracking": {
"current_release_date": "2026-08-21T12:23:34+00:00",
"generator": {
"date": "2026-08-21T12:23:34+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:5549",
"initial_release_date": "2026-03-24T07:31:25+00:00",
"revision_history": [
{
"date": "2026-03-24T07:31:25+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-15T05:55:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-21T12:23:34+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Builds for Red Hat OpenShift 1.6.1",
"product": {
"name": "Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_builds:1.6::el9"
}
}
}
],
"category": "product_family",
"name": "Builds for Red Hat OpenShift"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773920797"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773920861"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3Ae7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773921337"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3Ad3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773921036"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3Aabc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1774304869"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-operator-bundle@sha256%3Ab5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1774334986"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3A0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773931994"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3A391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773931788"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3Aa716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1774334066"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773921206"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773920797"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773920861"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773921337"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773921036"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3Aace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1774304869"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3Aea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773931994"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3A1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773931788"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1774334066"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61?arch=arm64\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773921206"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773920797"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773920861"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773921337"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773921036"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3Aa753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1774304869"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3Ae1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773931994"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3Ad6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773931788"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1774334066"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773921206"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-controller-rhel9@sha256%3A9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773920797"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-git-cloner-rhel9@sha256%3A9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773920861"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-bundler-rhel9@sha256%3A933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773921337"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-image-processing-rhel9@sha256%3A0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773921036"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-rhel9-operator@sha256%3A846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1774304869"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-rhel9@sha256%3Ad9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773931994"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-shared-resource-webhook-rhel9@sha256%3Ab623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773931788"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-waiters-rhel9@sha256%3A8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1774334066"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x",
"product": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x",
"product_id": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift-builds-webhook-rhel9@sha256%3A1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c?arch=s390x\u0026repository_url=registry.redhat.io/openshift-builds\u0026tag=1773921206"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64 as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64 as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64 as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64 as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64 as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64 as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64 as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64 as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64 as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64 as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64 as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64 as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64 as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64 as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64 as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64 as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64 as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64 as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64 as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le as a component of Builds for Red Hat OpenShift 1.6.1",
"product_id": "Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le",
"relates_to_product_reference": "Builds for Red Hat OpenShift 1.6.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le"
],
"known_not_affected": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-24T07:31:25+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.6.3 upgrades to to 1.6.4",
"product_ids": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5549"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61728",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:39.965024+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434431"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A Go application processing a malicious archive can become unresponsive or crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to be able to process a malicious zip archive with an application using the archive/zip package. Additionally, this vulnerability can cause a Go application to consume an excessive amount of CPU and memory, eventually resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le"
],
"known_not_affected": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61728"
},
{
"category": "external",
"summary": "RHBZ#2434431",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434431"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61728",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61728"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728"
},
{
"category": "external",
"summary": "https://go.dev/cl/736713",
"url": "https://go.dev/cl/736713"
},
{
"category": "external",
"summary": "https://go.dev/issue/77102",
"url": "https://go.dev/issue/77102"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4342",
"url": "https://pkg.go.dev/vuln/GO-2026-4342"
}
],
"release_date": "2026-01-28T19:30:31.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-24T07:31:25+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.6.3 upgrades to to 1.6.4",
"product_ids": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5549"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, implement a timeout in your archive/zip processing logic to abort the operation if it exceeds a few seconds, preventing the application from consuming an excessive amount of resources.",
"product_ids": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip"
},
{
"cve": "CVE-2025-66471",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2025-12-05T17:02:21.597728+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419467"
}
],
"notes": [
{
"category": "description",
"text": "A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 Streaming API improperly handles highly compressed data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in urllib3\u0027s streaming API that can lead to excessive resource consumption, including high CPU usage and significant memory allocation. When processing highly compressed data from untrusted sources, even small requested chunks can trigger full decompression, posing a denial-of-service risk to client-side applications utilizing affected urllib3 versions prior to 2.6.0.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64"
],
"known_not_affected": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "RHBZ#2419467",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419467"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66471",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66471"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7",
"url": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37"
}
],
"release_date": "2025-12-05T16:06:08.531000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-24T07:31:25+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.6.3 upgrades to to 1.6.4",
"product_ids": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5549"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 Streaming API improperly handles highly compressed data"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64"
],
"known_not_affected": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-24T07:31:25+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.6.3 upgrades to to 1.6.4",
"product_ids": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5549"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64"
],
"known_not_affected": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-24T07:31:25+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.6.3 upgrades to to 1.6.4",
"product_ids": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5549"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64"
],
"known_not_affected": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-24T07:31:25+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Builds 1.6.3 upgrades to to 1.6.4",
"product_ids": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5549"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:3e7802fd4777d02152c225bd23d99d3a67301ef7dcc4d86624dc0852905b89c0_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:658118be2dd7dde63668822f2b10bf2155d1a7264435c31e9da01c4eed429a31_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:6ebecac905954551ee9e1d8ace2282305823528e5d81f430020390e6f0146733_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9f138971e0419cf08273b296c86770a6a8146e96b19f354df51141794cb2dc50_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:0c292a7860239fcaf9dc3b99ded7fb3bf35bb04e36419731012a407a055ce93a_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:84a60e844b90441a353b605ec9d893426a2cba422c45306090273a738b029242_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:86dc4e5cb44e3e7519fa3fb4c994b2cc9204117a728c458b3994c8c6dfba372d_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:9a0705a74dbf6f6dc4f202696462940aa8c21358c60678d8c06f39e438ee410d_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:6cad955d303121f214c9200fdded75a18c0ebca4d6676fc49fb82c06fc4790fc_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:933f790fe6a2652dde798dcb39e4daeb6ad2a3b371d3b4930ef4f016a70769ed_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:942b6a4d4299e09ba619144ee216cb5eea73dd8aea6117ae4cb92a82c026c76b_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:e7607a6ca262ba1f9403d8a89e8f9771b84cac45e43eaee739789cf0cb8ebd29_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:0a49e3ed4090ee01e433871ef2765d8c74813333f6a641f2edff6fd56ede8d76_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:21230f1cee5974dc459f4b31f829f942cf27d2b7adf081ade185f78b8554822f_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:7aaa6d41e175e70f6a96ee44ba47805987a818858a19517698ec564d2d4c6c61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:d3092e5ad323b1454a7ee54d54ff0aae0f5cb44603a93a80087768e984c917fc_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:b5a49391fd646c612bff8ee78e55f193f17141a3ef567eefdbaa21e9edaf4ed1_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:846cfa73983011c3f351e0584ace035ad06713f78e625e351922c33c31fc35f6_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:a753821c3238712b53436e7689ed0bf6dde224aa9bbcca70c4018709e7391ff5_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:abc4ca39454ce581794f6e80b272878b1aa81636d84933de5de0035888d9e231_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:ace068e3a65adc34ebba6a38242d4bb65e8cdd05c846daadfaa9e687e666b0bb_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:0a3b22036310909533456be9c03ae6b7b3c5d91b89b245533925cfe81e523d9e_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:d9a636edf9d0ea72339a6cf4af5d343f8ff0723cd466581a80968820405f9a15_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:e1489201089cda6b2b6dfe8b3b74bb4565030586de1ba18888727a5ddba4dea1_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:ea105c68e91862c8d0279240d9d92d1d27b816b49bbf528fb2d30a11343a24d8_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:1cc18f61f97007488f929514f0d96e7ee799cbeb57c8040393510fb5df1308ea_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:391eda856869508163773cf3d8f457bc27bae4619009abab4e1bc95c34013a80_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:b623dd3f2f055038655d3ec62983d6bf7f519d4b2d010c89f2809870ab75c3ff_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:d6d1b43384c9532b4d5c0af85df5a6086b986494825216103c02bfe67ddb1f33_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:10cc203162a18a29b59faedf70efbdce132e92f64f915d3265c4fcb44711df9c_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:1beb2ef462b304a691c1bfd855bc6f70d26895a290de7524e0806ea023f92a30_ppc64le",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:8006f2dbeae12667c5a31827ef0f022733a950234cd55a0239334f3003b6e438_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:a716d3e3cc713c7494d0c051d23a872f4d8404f5f2c5226b13c715c901122872_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:19356ed9f617a6fccc1b299c05c07a54d078d1cde15ebe6663e2e11da3b7ac61_arm64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1dad4897c8b22566fd61a83af3ae9f235001d5b8e5cdd40ed6d76bf7f58b508a_amd64",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:1e20f4f7824339c4685afa6e309f8c143c245d824ae7d781488816fa1d62d17c_s390x",
"Builds for Red Hat OpenShift 1.6.1:registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:8fa9769e07dd82241952df0f4dd80e3d9671a9df66f0a4390d009123c6f09179_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
}
]
}
RHSA-2026:7291
Vulnerability from csaf_redhat - Published: 2026-04-09 11:00 - Updated: 2026-08-21 12:24Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Severity
Important
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs:
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A path traversal vulnerability has been identified in the Go os package affecting the Root abstraction, where improper handling of trailing path separators could allow access to the parent directory of a configured root directory. By supplying a filename ending in "../", an attacker may be able to open the immediate parent directory of the intended Root. Although this escape does not allow traversal to higher-level ancestors or direct access to files within the parent directory, it may expose directory metadata or unintended filesystem structure if the application passes untrusted path input to Root.Open.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A CrossOriginProtection bypass has been discovered in the golang net/http package. When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.
5.4 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed within square brackets. For example: "http://[::1]/". IPv4 addresses and hostnames must not appear within square brackets. Parse did not enforce this requirement.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in the SSH Agent servers component (golang.org/x/crypto/ssh/agent). This vulnerability allows a remote attacker to cause a denial of service (DoS) by sending a specially crafted, malformed message during new identity requests. The server fails to validate the size of these messages, leading to an out-of-bounds read that can cause the program to panic and terminate.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. An attacker can exploit this vulnerability by sending specially crafted GSSAPI (Generic Security Service Application Program Interface) authentication requests to an SSH (Secure Shell) server. The server fails to validate the number of mechanisms specified in these requests, leading to unbounded memory consumption. This can result in a Denial of Service (DoS), making the SSH server unavailable to legitimate users.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A memory exhaustion flaw has been discovered in the golang encoding/asn1 module. Within parseSequenceOf, reflect.MakeSlice is being used to pre-allocate a slice that is needed in order to fully validate the given DER payload. The size of the slice allocated are also multiple times larger than the input DER. As a result, a malicious actor can craft a big empty DER payload, resulting in an unnecessary large allocation of memories. This can be a way to cause memory exhaustion.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/net/http. A remote attacker could exploit this vulnerability by sending a large number of small cookies to an HTTP server. Despite a default 1MB limit on HTTP headers, the number of cookies parsed is unrestricted, leading to excessive memory allocation. This can cause the server to consume significant memory resources, resulting in a denial of service (DoS) for legitimate users.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
A potential denial of service flaw has been discovered in golang's crypto/x509 module. Due to the design of the name constraint checking algorithm, the processing time of some inputs scales non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A denial of service vector has been discovered in the golang crypto/x509 module. An attacker could craft an intermediate X.509 certificate containing a DSA public key and can crash a remote host with an unauthenticated call to any endpoint that verifies the certificate chain.
CWE-617 - Reachable AssertionAffected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
The crypto/tls conn.Handshake method returns an error on the server-side when ALPN negotation fails which can contain arbitrary attacker controlled information provided by the client-side of the connection which is not escaped. This affects programs which log these errors without any additional form of sanitization, and may allow injection of attacker controlled information into logs.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) in an exposed go application if an attacker provides specially crafted HTML content.
4.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A potential denial of service flaw has been discovered in the golang encoding/pem module. Due to the design of the PEM parsing function, the processing time for some inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs and may result in an unresponsive program should an attacker exploit it.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A denial of service vulnerability has been discovered in the golang net/mail module. The ParseAddress function constructed domain-literal address components through repeated string concatenation which when parsing large domain-literal components, could cause excessive CPU consumption.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the crypto/x509 package in the Go standard library. This vulnerability allows a certificate validation bypass via an excluded subdomain constraint in a certificated chain as it does not restrict the usage of wildcard SANs in the leaf certificate.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A Go application processing a malicious archive can become unresponsive or crash, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A TLS connection handling flaw has been discovered in the golang crypto/tls library. During the TLS 1.3 handshake if multiple messages are sent in records that span encryption level boundaries (for instance the Client Hello and Encrypted Extensions messages), the subsequent messages may be processed before the encryption level changes. This can cause some minor information disclosure if a network-local attacker can inject messages during the handshake.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in cmd/go. An attacker can exploit this by building a malicious Go source file that uses the '#cgo pkg-config:' directive. This allows the attacker to write to an arbitrary file with partial control over its content, by providing a '--log-file' argument to the pkg-config command. This vulnerability can lead to arbitrary file write.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Go's 'cgo tool'. This vulnerability arises from a discrepancy in how Go and C/C++ comments are parsed, which allows for malicious code to be hidden within comments and then "smuggled" into the compiled `cgo` binary. An attacker could exploit this to embed and execute arbitrary code, potentially leading to significant system compromise.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Golang's cmd/go module. This vulnerability allows a local attacker to achieve local code execution by downloading and building modules with specially crafted malicious version strings. On systems with Mercurial (hg) installed, this can occur when downloading modules from non-standard sources due to how external Version Control System (VCS) commands are constructed. Additionally, on systems with Git installed, providing malicious version strings to the toolchain can enable an attacker to write to arbitrary files on the filesystem. This issue is triggered by explicitly supplying these malicious version strings.
6.7 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints. This can crash programs that are either directly verifying X.509 certificate chains, or those that use TLS.
CWE-295 - Improper Certificate ValidationAffected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
A path traversal flaw has been discovered in the golang `os` module. On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the filesystem without permitting reading or writing files outside the root.
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
A flaw was found in golang.org/x/net/http2. A remote attacker can exploit this vulnerability by sending specially crafted HTTP/2 frames, which are data packets used in the HTTP/2 protocol. Due to a missing check for null values, processing these specific frames (types 0x0a through 0x0f) can cause the server to crash. This leads to a Denial of Service (DoS) condition, making the affected server unavailable to legitimate users.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
An input escaping flaw has been discovered in the golang html/template module. Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow "url=" by setting htmlmetacontenturlescape=0.
5.4 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the cmd/compile package in the Go standard library. The compiler fails to correctly check for integer overflow or underflow in arithmetic operations involving loop induction variables. As a result, the compiler allows invalid memory indexing to occur at runtime, potentially leading to memory corruption.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the cmd/compile package in the Go standard library. A no-op interface conversion prevented the compiler from correctly identifying non-overlapping memory moves. As a result, the compiler allows unsafe memory move operations to occur at runtime, potentially causing data corruption, memory corruption or unexpected application behavior.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Go's `archive/tar` package. A remote attacker could exploit this vulnerability by providing a maliciously-crafted archive file. When the `tar.Reader` processes an archive containing a large number of sparse regions in the "old GNU sparse map" format, it can lead to unbounded memory allocation. This can result in a Denial of Service (DoS) condition, making the affected application unresponsive.
4.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `html/template` package. This vulnerability arises from improper tracking of context and brace depth within JavaScript (JS) template literals. A remote attacker could exploit these issues to cause content to be incorrectly or improperly escaped, leading to Cross-Site Scripting (XSS) vulnerabilities. This could allow an attacker to inject malicious scripts into web pages viewed by other users.
5.4 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/image/tiff. A remote attacker could exploit this vulnerability by providing a maliciously crafted Tagged Image File Format (TIFF) file. This could cause the image decoding process to attempt to allocate up to 4 gigabytes (GiB) of memory. The excessive resource consumption or an out-of-memory error would lead to a Denial of Service (DoS) condition.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
332 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat Hardened Images RPMs is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "This update includes the following RPMs:",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:7291",
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "external",
"summary": "https://images.redhat.com/",
"url": "https://images.redhat.com/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27141",
"url": "https://access.redhat.com/security/cve/CVE-2026-27141"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58190",
"url": "https://access.redhat.com/security/cve/CVE-2025-58190"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-47911",
"url": "https://access.redhat.com/security/cve/CVE-2025-47911"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-22873",
"url": "https://access.redhat.com/security/cve/CVE-2025-22873"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68119",
"url": "https://access.redhat.com/security/cve/CVE-2025-68119"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61732",
"url": "https://access.redhat.com/security/cve/CVE-2025-61732"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61731",
"url": "https://access.redhat.com/security/cve/CVE-2025-61731"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61725",
"url": "https://access.redhat.com/security/cve/CVE-2025-61725"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61724",
"url": "https://access.redhat.com/security/cve/CVE-2025-61724"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61723",
"url": "https://access.redhat.com/security/cve/CVE-2025-61723"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58186",
"url": "https://access.redhat.com/security/cve/CVE-2025-58186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58185",
"url": "https://access.redhat.com/security/cve/CVE-2025-58185"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58181",
"url": "https://access.redhat.com/security/cve/CVE-2025-58181"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-47914",
"url": "https://access.redhat.com/security/cve/CVE-2025-47914"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-47912",
"url": "https://access.redhat.com/security/cve/CVE-2025-47912"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-47910",
"url": "https://access.redhat.com/security/cve/CVE-2025-47910"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61730",
"url": "https://access.redhat.com/security/cve/CVE-2025-61730"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58189",
"url": "https://access.redhat.com/security/cve/CVE-2025-58189"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58187",
"url": "https://access.redhat.com/security/cve/CVE-2025-58187"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58188",
"url": "https://access.redhat.com/security/cve/CVE-2025-58188"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58183",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61728",
"url": "https://access.redhat.com/security/cve/CVE-2025-61728"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61726",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33809",
"url": "https://access.redhat.com/security/cve/CVE-2026-33809"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32289",
"url": "https://access.redhat.com/security/cve/CVE-2026-32289"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32288",
"url": "https://access.redhat.com/security/cve/CVE-2026-32288"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32283",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27144",
"url": "https://access.redhat.com/security/cve/CVE-2026-27144"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27143",
"url": "https://access.redhat.com/security/cve/CVE-2026-27143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61727",
"url": "https://access.redhat.com/security/cve/CVE-2025-61727"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27139",
"url": "https://access.redhat.com/security/cve/CVE-2026-27139"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27138",
"url": "https://access.redhat.com/security/cve/CVE-2026-27138"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27142",
"url": "https://access.redhat.com/security/cve/CVE-2026-27142"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7291.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
"tracking": {
"current_release_date": "2026-08-21T12:24:01+00:00",
"generator": {
"date": "2026-08-21T12:24:01+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:7291",
"initial_release_date": "2026-04-09T11:00:43+00:00",
"revision_history": [
{
"date": "2026-04-09T11:00:43+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-15T05:55:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-21T12:24:01+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"branches": [
{
"category": "product_version",
"name": "golang1-26-main@aarch64",
"product": {
"name": "golang1-26-main@aarch64",
"product_id": "golang1-26-main@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang1.26@1.26.2-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "golang1-26-main@src",
"product": {
"name": "golang1-26-main@src",
"product_id": "golang1-26-main@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang1.26@1.26.2-1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "golang1-26-main@x86_64",
"product": {
"name": "golang1-26-main@x86_64",
"product_id": "golang1-26-main@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang1.26@1.26.2-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "golang1-26-main@noarch",
"product": {
"name": "golang1-26-main@noarch",
"product_id": "golang1-26-main@noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang1.26-docs@1.26.2-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "golang1-26-main@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:golang1-26-main@aarch64"
},
"product_reference": "golang1-26-main@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang1-26-main@noarch as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:golang1-26-main@noarch"
},
"product_reference": "golang1-26-main@noarch",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang1-26-main@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:golang1-26-main@src"
},
"product_reference": "golang1-26-main@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang1-26-main@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:golang1-26-main@x86_64"
},
"product_reference": "golang1-26-main@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-22873",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-02-05T00:01:17.475869+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2436992"
}
],
"notes": [
{
"category": "description",
"text": "A path traversal vulnerability has been identified in the Go os package affecting the Root abstraction, where improper handling of trailing path separators could allow access to the parent directory of a configured root directory. By supplying a filename ending in \"../\", an attacker may be able to open the immediate parent directory of the intended Root. Although this escape does not allow traversal to higher-level ancestors or direct access to files within the parent directory, it may expose directory metadata or unintended filesystem structure if the application passes untrusted path input to Root.Open.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "os: os: Information disclosure via path traversal using specially crafted filenames",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security classified this issue as Moderate.\n\nThe flaw exists in a local filesystem abstraction within the Go standard library, it can also be exploited remotely in applications that accept attacker-controlled path input over a network and pass it to Root.Open without proper validation. The attack complexity is low, as exploitation requires only appending \"../\" to the supplied path. However, the impact is limited: the flaw permits opening only the immediate parent directory, not arbitrary filesystem locations or files contained within that directory. There is no direct impact on file integrity or application availability. These constraints limit the practical exposure of the issue while still represents a boundary bypass and may expose unintended filesystem metadata. The issue does not permit traversal beyond the parent directory, modification of files, or broader system compromise, thereby constraining its overall impact.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-22873"
},
{
"category": "external",
"summary": "RHBZ#2436992",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436992"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-22873",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-22873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22873"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2025/05/06/2",
"url": "http://www.openwall.com/lists/oss-security/2025/05/06/2"
},
{
"category": "external",
"summary": "https://go.dev/cl/670036",
"url": "https://go.dev/cl/670036"
},
{
"category": "external",
"summary": "https://go.dev/issue/73555",
"url": "https://go.dev/issue/73555"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/UZoIkUT367A/m/5WDxKizJAQAJ",
"url": "https://groups.google.com/g/golang-announce/c/UZoIkUT367A/m/5WDxKizJAQAJ"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4403",
"url": "https://pkg.go.dev/vuln/GO-2026-4403"
}
],
"release_date": "2026-02-04T23:05:24.803000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "os: os: Information disclosure via path traversal using specially crafted filenames"
},
{
"cve": "CVE-2025-47910",
"cwe": {
"id": "CWE-440",
"name": "Expected Behavior Violation"
},
"discovery_date": "2025-09-22T22:00:44.572202+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2397528"
}
],
"notes": [
{
"category": "description",
"text": "A CrossOriginProtection bypass has been discovered in the golang net/http package. When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http: CrossOriginProtection bypass in net/http",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-47910"
},
{
"category": "external",
"summary": "RHBZ#2397528",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397528"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-47910",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47910"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47910",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47910"
},
{
"category": "external",
"summary": "https://go.dev/cl/699275",
"url": "https://go.dev/cl/699275"
},
{
"category": "external",
"summary": "https://go.dev/issue/75054",
"url": "https://go.dev/issue/75054"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/PtW9VW21NPs/m/DJhMQ-m5AQAJ",
"url": "https://groups.google.com/g/golang-announce/c/PtW9VW21NPs/m/DJhMQ-m5AQAJ"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-3955",
"url": "https://pkg.go.dev/vuln/GO-2025-3955"
}
],
"release_date": "2025-09-22T21:01:55.440000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "net/http: CrossOriginProtection bypass in net/http"
},
{
"cve": "CVE-2025-47911",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2026-02-05T18:01:23.423406+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437109"
}
],
"notes": [
{
"category": "description",
"text": "The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: The `golang.org/x/net/html` package, used across various Red Hat products, is vulnerable to a denial of service due to quadratic parsing complexity in its `html.Parse` function. An attacker providing specially crafted HTML content could exploit this flaw, leading to resource exhaustion and service unavailability in applications that process untrusted HTML input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-47911"
},
{
"category": "external",
"summary": "RHBZ#2437109",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437109"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-47911",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47911"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47911",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47911"
},
{
"category": "external",
"summary": "https://github.com/golang/vulndb/issues/4440",
"url": "https://github.com/golang/vulndb/issues/4440"
},
{
"category": "external",
"summary": "https://go.dev/cl/709876",
"url": "https://go.dev/cl/709876"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c",
"url": "https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4440",
"url": "https://pkg.go.dev/vuln/GO-2026-4440"
}
],
"release_date": "2026-02-05T17:48:44.562000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html"
},
{
"cve": "CVE-2025-47912",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2025-10-29T23:01:06.642219+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407247"
}
],
"notes": [
{
"category": "description",
"text": "The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed within square brackets. For example: \"http://[::1]/\". IPv4 addresses and hostnames must not appear within square brackets. Parse did not enforce this requirement.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Insufficient validation of bracketed IPv6 hostnames in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-47912"
},
{
"category": "external",
"summary": "RHBZ#2407247",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407247"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-47912",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47912"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47912",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47912"
},
{
"category": "external",
"summary": "https://go.dev/cl/709857",
"url": "https://go.dev/cl/709857"
},
{
"category": "external",
"summary": "https://go.dev/issue/75678",
"url": "https://go.dev/issue/75678"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4010",
"url": "https://pkg.go.dev/vuln/GO-2025-4010"
}
],
"release_date": "2025-10-29T22:10:13.435000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "net/url: Insufficient validation of bracketed IPv6 hostnames in net/url"
},
{
"cve": "CVE-2025-47914",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2025-11-19T21:01:06.202641+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416000"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the SSH Agent servers component (golang.org/x/crypto/ssh/agent). This vulnerability allows a remote attacker to cause a denial of service (DoS) by sending a specially crafted, malformed message during new identity requests. The server fails to validate the size of these messages, leading to an out-of-bounds read that can cause the program to panic and terminate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat products. The golang.org/x/crypto/ssh/agent library, when used in SSH Agent servers, does not properly validate the size of messages during new identity requests. A specially crafted malformed message can lead to an out-of-bounds read, causing the program to panic and resulting in a denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-47914"
},
{
"category": "external",
"summary": "RHBZ#2416000",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416000"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-47914",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47914"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47914",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47914"
},
{
"category": "external",
"summary": "https://go.dev/cl/721960",
"url": "https://go.dev/cl/721960"
},
{
"category": "external",
"summary": "https://go.dev/issue/76364",
"url": "https://go.dev/issue/76364"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA",
"url": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4135",
"url": "https://pkg.go.dev/vuln/GO-2025-4135"
}
],
"release_date": "2025-11-19T20:33:43.126000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages"
},
{
"cve": "CVE-2025-58181",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-11-19T21:00:50.197590+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2415997"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. An attacker can exploit this vulnerability by sending specially crafted GSSAPI (Generic Security Service Application Program Interface) authentication requests to an SSH (Secure Shell) server. The server fails to validate the number of mechanisms specified in these requests, leading to unbounded memory consumption. This can result in a Denial of Service (DoS), making the SSH server unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via unbounded memory consumption in GSSAPI authentication",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat. SSH servers utilizing `golang.org/x/crypto/ssh` and configured to process GSSAPI authentication requests are susceptible to unbounded memory consumption. An attacker can exploit this by sending specially crafted GSSAPI authentication requests, potentially leading to a denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58181"
},
{
"category": "external",
"summary": "RHBZ#2415997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2415997"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58181",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58181"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58181",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58181"
},
{
"category": "external",
"summary": "https://go.dev/cl/721961",
"url": "https://go.dev/cl/721961"
},
{
"category": "external",
"summary": "https://go.dev/issue/76363",
"url": "https://go.dev/issue/76363"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA",
"url": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4134",
"url": "https://pkg.go.dev/vuln/GO-2025-4134"
}
],
"release_date": "2025-11-19T20:33:42.795000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via unbounded memory consumption in GSSAPI authentication"
},
{
"cve": "CVE-2025-58183",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-10-29T23:01:50.573951+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407258"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to be able to process a specially crafted GNU tar pax 1.0 archive with the application using the archive/tar package. Additionally, this issue can cause the Go application to allocate a large amount of memory, eventually leading to an out-of-memory condition and resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "RHBZ#2407258",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407258"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58183",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58183"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://go.dev/cl/709861",
"url": "https://go.dev/cl/709861"
},
{
"category": "external",
"summary": "https://go.dev/issue/75677",
"url": "https://go.dev/issue/75677"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4014",
"url": "https://pkg.go.dev/vuln/GO-2025-4014"
}
],
"release_date": "2025-10-29T22:10:14.376000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map"
},
{
"cve": "CVE-2025-58185",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-10-29T23:01:25.877898+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407251"
}
],
"notes": [
{
"category": "description",
"text": "A memory exhaustion flaw has been discovered in the golang encoding/asn1 module. Within parseSequenceOf, reflect.MakeSlice is being used to pre-allocate a slice that is needed in order to fully validate the given DER payload. The size of the slice allocated are also multiple times larger than the input DER. As a result, a malicious actor can craft a big empty DER payload, resulting in an unnecessary large allocation of memories. This can be a way to cause memory exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58185"
},
{
"category": "external",
"summary": "RHBZ#2407251",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407251"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58185",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58185"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58185",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58185"
},
{
"category": "external",
"summary": "https://github.com/golang/go/commit/8709a41d5ef7321f486a1857f189c3fee20e8edd",
"url": "https://github.com/golang/go/commit/8709a41d5ef7321f486a1857f189c3fee20e8edd"
},
{
"category": "external",
"summary": "https://go.dev/cl/709856",
"url": "https://go.dev/cl/709856"
},
{
"category": "external",
"summary": "https://go.dev/issue/75671",
"url": "https://go.dev/issue/75671"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4011",
"url": "https://pkg.go.dev/vuln/GO-2025-4011"
}
],
"release_date": "2025-10-29T22:10:13.682000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1"
},
{
"cve": "CVE-2025-58186",
"discovery_date": "2025-10-29T23:01:22.260983+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407250"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/net/http. A remote attacker could exploit this vulnerability by sending a large number of small cookies to an HTTP server. Despite a default 1MB limit on HTTP headers, the number of cookies parsed is unrestricted, leading to excessive memory allocation. This can cause the server to consume significant memory resources, resulting in a denial of service (DoS) for legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service vulnerability exists in applications using `golang.org/net/http` where an attacker can cause excessive memory consumption by sending a large number of small cookies. While HTTP headers generally have a 1MB limit, the parsing of individual cookies does not, leading to potential resource exhaustion. This issue has a Low impact on Red Hat products due to typical deployment configurations and resource management practices.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58186"
},
{
"category": "external",
"summary": "RHBZ#2407250",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407250"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58186",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58186"
},
{
"category": "external",
"summary": "https://go.dev/cl/709855",
"url": "https://go.dev/cl/709855"
},
{
"category": "external",
"summary": "https://go.dev/issue/75672",
"url": "https://go.dev/issue/75672"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4012",
"url": "https://pkg.go.dev/vuln/GO-2025-4012"
}
],
"release_date": "2025-10-29T22:10:13.912000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http"
},
{
"cve": "CVE-2025-58187",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-10-29T23:01:54.130980+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407259"
}
],
"notes": [
{
"category": "description",
"text": "A potential denial of service flaw has been discovered in golang\u0027s crypto/x509 module. Due to the design of the name constraint checking algorithm, the processing time of some inputs scales non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Quadratic complexity when checking name constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58187"
},
{
"category": "external",
"summary": "RHBZ#2407259",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407259"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58187",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58187"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58187",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58187"
},
{
"category": "external",
"summary": "https://github.com/golang/go/commit/3fc4c79fdbb17b9b29ea9f8c29dd780df075d4c4",
"url": "https://github.com/golang/go/commit/3fc4c79fdbb17b9b29ea9f8c29dd780df075d4c4"
},
{
"category": "external",
"summary": "https://go.dev/cl/709854",
"url": "https://go.dev/cl/709854"
},
{
"category": "external",
"summary": "https://go.dev/issue/75681",
"url": "https://go.dev/issue/75681"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4007",
"url": "https://pkg.go.dev/vuln/GO-2025-4007"
}
],
"release_date": "2025-10-29T22:10:12.624000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: Quadratic complexity when checking name constraints in crypto/x509"
},
{
"cve": "CVE-2025-58188",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"discovery_date": "2025-10-29T23:01:39.787633+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407255"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vector has been discovered in the golang crypto/x509 module. An attacker could craft an intermediate X.509 certificate containing a DSA public key and can crash a remote host with an unauthenticated call to any endpoint that verifies the certificate chain.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Availability impacts are limited on Red Hat products as they do not affect the host systems.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58188"
},
{
"category": "external",
"summary": "RHBZ#2407255",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407255"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58188",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58188"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58188",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58188"
}
],
"release_date": "2025-10-29T22:10:14.143000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509"
},
{
"cve": "CVE-2025-58189",
"cwe": {
"id": "CWE-117",
"name": "Improper Output Neutralization for Logs"
},
"discovery_date": "2025-10-29T23:01:57.740310+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407260"
}
],
"notes": [
{
"category": "description",
"text": "The crypto/tls conn.Handshake method returns an error on the server-side when ALPN negotation fails which can contain arbitrary attacker controlled information provided by the client-side of the connection which is not escaped. This affects programs which log these errors without any additional form of sanitization, and may allow injection of attacker controlled information into logs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58189"
},
{
"category": "external",
"summary": "RHBZ#2407260",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407260"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58189",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58189"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58189",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58189"
},
{
"category": "external",
"summary": "https://go.dev/cl/707776",
"url": "https://go.dev/cl/707776"
},
{
"category": "external",
"summary": "https://go.dev/issue/75652",
"url": "https://go.dev/issue/75652"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4008",
"url": "https://pkg.go.dev/vuln/GO-2025-4008"
}
],
"release_date": "2025-10-29T22:10:12.947000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information"
},
{
"cve": "CVE-2025-58190",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-02-05T18:01:26.511908+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437110"
}
],
"notes": [
{
"category": "description",
"text": "The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) in an exposed go application if an attacker provides specially crafted HTML content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: Infinite parsing loop in golang.org/x/net",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58190"
},
{
"category": "external",
"summary": "RHBZ#2437110",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437110"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58190",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58190"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58190",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58190"
},
{
"category": "external",
"summary": "https://github.com/golang/vulndb/issues/4441",
"url": "https://github.com/golang/vulndb/issues/4441"
},
{
"category": "external",
"summary": "https://go.dev/cl/709875",
"url": "https://go.dev/cl/709875"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c",
"url": "https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4441",
"url": "https://pkg.go.dev/vuln/GO-2026-4441"
}
],
"release_date": "2026-02-05T17:48:44.693000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: Infinite parsing loop in golang.org/x/net"
},
{
"cve": "CVE-2025-61723",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-10-29T23:01:29.304260+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407252"
}
],
"notes": [
{
"category": "description",
"text": "A potential denial of service flaw has been discovered in the golang encoding/pem module. Due to the design of the PEM parsing function, the processing time for some\ninputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs and may result in an unresponsive program should an attacker exploit it.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61723"
},
{
"category": "external",
"summary": "RHBZ#2407252",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407252"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61723",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61723"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61723",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61723"
},
{
"category": "external",
"summary": "https://github.com/golang/go/commit/5ce8cd16f3859ec5ac4106ad8ec15d6236f4501b",
"url": "https://github.com/golang/go/commit/5ce8cd16f3859ec5ac4106ad8ec15d6236f4501b"
},
{
"category": "external",
"summary": "https://go.dev/cl/709858",
"url": "https://go.dev/cl/709858"
},
{
"category": "external",
"summary": "https://go.dev/issue/75676",
"url": "https://go.dev/issue/75676"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4009",
"url": "https://pkg.go.dev/vuln/GO-2025-4009"
}
],
"release_date": "2025-10-29T22:10:13.220000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem"
},
{
"cve": "CVE-2025-61724",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2025-10-29T23:01:47.202663+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407257"
}
],
"notes": [
{
"category": "description",
"text": "The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61724"
},
{
"category": "external",
"summary": "RHBZ#2407257",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407257"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61724",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61724"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61724",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61724"
},
{
"category": "external",
"summary": "https://go.dev/cl/709859",
"url": "https://go.dev/cl/709859"
},
{
"category": "external",
"summary": "https://go.dev/issue/75716",
"url": "https://go.dev/issue/75716"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4015",
"url": "https://pkg.go.dev/vuln/GO-2025-4015"
}
],
"release_date": "2025-10-29T22:10:14.609000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto"
},
{
"cve": "CVE-2025-61725",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-10-29T23:01:18.805163+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407249"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability has been discovered in the golang net/mail module. The ParseAddress function constructed domain-literal address components through repeated string concatenation which when parsing large domain-literal components, could cause excessive CPU consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: Excessive CPU consumption in ParseAddress in net/mail",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61725"
},
{
"category": "external",
"summary": "RHBZ#2407249",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407249"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61725",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61725"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61725",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61725"
},
{
"category": "external",
"summary": "https://go.dev/cl/709860",
"url": "https://go.dev/cl/709860"
},
{
"category": "external",
"summary": "https://go.dev/issue/75680",
"url": "https://go.dev/issue/75680"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4006",
"url": "https://pkg.go.dev/vuln/GO-2025-4006"
}
],
"release_date": "2025-10-29T22:10:12.255000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "net/mail: Excessive CPU consumption in ParseAddress in net/mail"
},
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61727",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2025-12-03T20:01:21.730501+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418677"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/x509 package in the Go standard library. This vulnerability allows a certificate validation bypass via an excluded subdomain constraint in a certificated chain as it does not restrict the usage of wildcard SANs in the leaf certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to obtain a leaf certificate with a wildcard SAN (e.g., *.example.com) and the legitimate certificate policy must contain an excluded DNS name constraint (e.g., to prevent issuance for test.example.com), allowing an application using the crypto/x509 package to validate the certificate when it should have been rejected and to be vulnerable to MITM (man-in-the-middle) attacks. Additionally, the attacker does not have full control of what data can be read of modified during the attack. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61727"
},
{
"category": "external",
"summary": "RHBZ#2418677",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418677"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61727",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61727"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61727",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61727"
},
{
"category": "external",
"summary": "https://go.dev/cl/723900",
"url": "https://go.dev/cl/723900"
},
{
"category": "external",
"summary": "https://go.dev/issue/76442",
"url": "https://go.dev/issue/76442"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4175",
"url": "https://pkg.go.dev/vuln/GO-2025-4175"
}
],
"release_date": "2025-12-03T19:37:15.054000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs"
},
{
"cve": "CVE-2025-61728",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:39.965024+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434431"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A Go application processing a malicious archive can become unresponsive or crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to be able to process a malicious zip archive with an application using the archive/zip package. Additionally, this vulnerability can cause a Go application to consume an excessive amount of CPU and memory, eventually resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61728"
},
{
"category": "external",
"summary": "RHBZ#2434431",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434431"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61728",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61728"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728"
},
{
"category": "external",
"summary": "https://go.dev/cl/736713",
"url": "https://go.dev/cl/736713"
},
{
"category": "external",
"summary": "https://go.dev/issue/77102",
"url": "https://go.dev/issue/77102"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4342",
"url": "https://pkg.go.dev/vuln/GO-2026-4342"
}
],
"release_date": "2026-01-28T19:30:31.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, implement a timeout in your archive/zip processing logic to abort the operation if it exceeds a few seconds, preventing the application from consuming an excessive amount of resources.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-61730",
"cwe": {
"id": "CWE-325",
"name": "Missing Cryptographic Step"
},
"discovery_date": "2026-01-28T20:01:36.508659+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434430"
}
],
"notes": [
{
"category": "description",
"text": "A TLS connection handling flaw has been discovered in the golang crypto/tls library. During the TLS 1.3 handshake if multiple messages are sent in records that span encryption level boundaries (for instance the Client Hello and Encrypted Extensions messages), the subsequent messages may be processed before the encryption level changes. This can cause some minor information disclosure if a network-local attacker can inject messages during the handshake.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The data leak after exploitation of this vulnerability is minor, data such as Handshake message contents that should have been processed only after switching to a stronger TLS 1.3 encryption level, Protocol state details such as which handshake message was processed when, Timing and ordering information about the TLS 1.3 state.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61730"
},
{
"category": "external",
"summary": "RHBZ#2434430",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434430"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61730",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61730"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61730",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61730"
}
],
"release_date": "2026-01-28T19:30:30.986000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls"
},
{
"cve": "CVE-2025-61731",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-01-28T20:01:45.587773+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434433"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in cmd/go. An attacker can exploit this by building a malicious Go source file that uses the \u0027#cgo pkg-config:\u0027 directive. This allows the attacker to write to an arbitrary file with partial control over its content, by providing a \u0027--log-file\u0027 argument to the pkg-config command. This vulnerability can lead to arbitrary file write.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cmd/go: cmd/go: Arbitrary file write via malicious pkg-config directive",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is Important rather than Moderate because compiling a malicious Go source file can cause `pkg-config` to create or append data to files at attacker-chosen locations, subject to the permissions of the build user. This can enable unintended filesystem modifications during the build process, which can lead to broken builds, alter tool behavior, and poison caches or artifacts, even without direct code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61731"
},
{
"category": "external",
"summary": "RHBZ#2434433",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434433"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61731",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61731"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61731",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61731"
},
{
"category": "external",
"summary": "https://go.dev/cl/736711",
"url": "https://go.dev/cl/736711"
},
{
"category": "external",
"summary": "https://go.dev/issue/77100",
"url": "https://go.dev/issue/77100"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4339",
"url": "https://pkg.go.dev/vuln/GO-2026-4339"
}
],
"release_date": "2026-01-28T19:30:30.844000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "cmd/go: cmd/go: Arbitrary file write via malicious pkg-config directive"
},
{
"cve": "CVE-2025-61732",
"discovery_date": "2026-02-05T05:00:47.678207+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437016"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s \u0027cgo tool\u0027. This vulnerability arises from a discrepancy in how Go and C/C++ comments are parsed, which allows for malicious code to be hidden within comments and then \"smuggled\" into the compiled `cgo` binary. An attacker could exploit this to embed and execute arbitrary code, potentially leading to significant system compromise.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cmd/cgo: Go cgo: Code smuggling due to comment parsing discrepancy",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability in the `cmd/cgo` component of the Go toolchain. A parsing discrepancy between Go and C/C++ comments could allow for code smuggling into the resulting `cgo` binary. This primarily affects systems where untrusted Go modules utilizing `cgo` are built, impacting Red Hat Enterprise Linux and OpenShift Container Platform.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61732"
},
{
"category": "external",
"summary": "RHBZ#2437016",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437016"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61732",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61732"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61732",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61732"
},
{
"category": "external",
"summary": "https://go.dev/cl/734220",
"url": "https://go.dev/cl/734220"
},
{
"category": "external",
"summary": "https://go.dev/issue/76697",
"url": "https://go.dev/issue/76697"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4433",
"url": "https://pkg.go.dev/vuln/GO-2026-4433"
}
],
"release_date": "2026-02-05T03:42:26.392000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "cmd/cgo: Go cgo: Code smuggling due to comment parsing discrepancy"
},
{
"cve": "CVE-2025-68119",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-01-28T20:01:57.098669+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434438"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Golang\u0027s cmd/go module. This vulnerability allows a local attacker to achieve local code execution by downloading and building modules with specially crafted malicious version strings. On systems with Mercurial (hg) installed, this can occur when downloading modules from non-standard sources due to how external Version Control System (VCS) commands are constructed. Additionally, on systems with Git installed, providing malicious version strings to the toolchain can enable an attacker to write to arbitrary files on the filesystem. This issue is triggered by explicitly supplying these malicious version strings.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cmd/go: cmd/go: Local code execution and arbitrary file write via malicious module version strings",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is rated Moderate severity by Red Hat Product Security, because exploitation requires non-standard and intentional user behavior. \n\nThe attacker must explicitly supply a specially crafted module version string, which does not occur during normal Go module usage such as @latest or standard module paths, making the attack complexity high. \n\nAdditionally, user interaction is required, as the vulnerable behavior is only triggered when a user manually invokes the Go toolchain to download or build the malicious module.\n \nWhile successful exploitation can result in local code execution or arbitrary file modification, the combination of local access, manual input, and uncommon usage patterns significantly limits the likelihood of exploitation in typical environments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68119"
},
{
"category": "external",
"summary": "RHBZ#2434438",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434438"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68119",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68119"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68119",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68119"
},
{
"category": "external",
"summary": "https://go.dev/cl/736710",
"url": "https://go.dev/cl/736710"
},
{
"category": "external",
"summary": "https://go.dev/issue/77099",
"url": "https://go.dev/issue/77099"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4338",
"url": "https://pkg.go.dev/vuln/GO-2026-4338"
}
],
"release_date": "2026-01-28T19:30:30.704000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cmd/go: cmd/go: Local code execution and arbitrary file write via malicious module version strings"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-27138",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:35.939008+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445344"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints. This can crash programs that are either directly verifying X.509 certificate chains, or those that use TLS.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Panic in name constraint checking for malformed certificates in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27138"
},
{
"category": "external",
"summary": "RHBZ#2445344",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445344"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27138",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27138"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27138",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27138"
},
{
"category": "external",
"summary": "https://go.dev/cl/752183",
"url": "https://go.dev/cl/752183"
},
{
"category": "external",
"summary": "https://go.dev/issue/77953",
"url": "https://go.dev/issue/77953"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4600",
"url": "https://pkg.go.dev/vuln/GO-2026-4600"
}
],
"release_date": "2026-03-06T21:28:14+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "crypto/x509: Panic in name constraint checking for malformed certificates in crypto/x509"
},
{
"cve": "CVE-2026-27139",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-06T22:01:08.670782+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445335"
}
],
"notes": [
{
"category": "description",
"text": "A path traversal flaw has been discovered in the golang `os` module. On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the filesystem without permitting reading or writing files outside the root.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "os: FileInfo can escape from a Root in golang os module",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27139"
},
{
"category": "external",
"summary": "RHBZ#2445335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27139",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27139"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27139",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27139"
},
{
"category": "external",
"summary": "https://go.dev/cl/749480",
"url": "https://go.dev/cl/749480"
},
{
"category": "external",
"summary": "https://go.dev/issue/77827",
"url": "https://go.dev/issue/77827"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4602",
"url": "https://pkg.go.dev/vuln/GO-2026-4602"
}
],
"release_date": "2026-03-06T21:28:14.451000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 2.5,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "os: FileInfo can escape from a Root in golang os module"
},
{
"cve": "CVE-2026-27141",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-02-26T20:09:11.626155+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2443104"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/http2. A remote attacker can exploit this vulnerability by sending specially crafted HTTP/2 frames, which are data packets used in the HTTP/2 protocol. Due to a missing check for null values, processing these specific frames (types 0x0a through 0x0f) can cause the server to crash. This leads to a Denial of Service (DoS) condition, making the affected server unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/http2: golang.org/x/net/http2: Denial of Service due to malformed HTTP/2 frames",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27141"
},
{
"category": "external",
"summary": "RHBZ#2443104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2443104"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27141",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27141"
},
{
"category": "external",
"summary": "https://go.dev/cl/746180",
"url": "https://go.dev/cl/746180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77652",
"url": "https://go.dev/issue/77652"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4559",
"url": "https://pkg.go.dev/vuln/GO-2026-4559"
}
],
"release_date": "2026-02-26T18:50:31.830000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/http2: golang.org/x/net/http2: Denial of Service due to malformed HTTP/2 frames"
},
{
"cve": "CVE-2026-27142",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-03-06T22:01:56.662646+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445351"
}
],
"notes": [
{
"category": "description",
"text": "An input escaping flaw has been discovered in the golang html/template module. Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value \"refresh\". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow \"url=\" by setting htmlmetacontenturlescape=0.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: URLs in meta content attribute actions are not escaped in html/template",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27142"
},
{
"category": "external",
"summary": "RHBZ#2445351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445351"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27142",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27142"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27142",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27142"
},
{
"category": "external",
"summary": "https://go.dev/cl/752081",
"url": "https://go.dev/cl/752081"
},
{
"category": "external",
"summary": "https://go.dev/issue/77954",
"url": "https://go.dev/issue/77954"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4603",
"url": "https://pkg.go.dev/vuln/GO-2026-4603"
}
],
"release_date": "2026-03-06T21:28:14.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "html/template: URLs in meta content attribute actions are not escaped in html/template"
},
{
"cve": "CVE-2026-27143",
"cwe": {
"id": "CWE-733",
"name": "Compiler Optimization Removal or Modification of Security-critical Code"
},
"discovery_date": "2026-04-08T02:01:29.491546+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456342"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the cmd/compile package in the Go standard library. The compiler fails to correctly check for integer overflow or underflow in arithmetic operations involving loop induction variables. As a result, the compiler allows invalid memory indexing to occur at runtime, potentially leading to memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: cmd/compile: possible memory corruption after bound check elimination",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is only exploitable in applications that contain a loop structure that relies on an induction variable. An induction variable is a variable that gets modified, usually incremented or decremented, by a predictable amount on each iteration. Inside the loop, the induction variable must be directly used as the index to access or modify elements within an array or a slice. Additionally, an attacker must be able to cause an integer overflow or underflow in the induction variable to trigger this issue. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27143"
},
{
"category": "external",
"summary": "RHBZ#2456342",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456342"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27143"
},
{
"category": "external",
"summary": "https://go.dev/cl/763765",
"url": "https://go.dev/cl/763765"
},
{
"category": "external",
"summary": "https://go.dev/issue/78333",
"url": "https://go.dev/issue/78333"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4868",
"url": "https://pkg.go.dev/vuln/GO-2026-4868"
}
],
"release_date": "2026-04-08T01:06:57.168000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, strictly sanitize and enforce bounds checking on any untrusted user input that influences loop counters, iteration limits, or memory indices. If there is no integer overflow or underflow, the out-of-bounds access cannot occur.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: cmd/compile: possible memory corruption after bound check elimination"
},
{
"cve": "CVE-2026-27144",
"cwe": {
"id": "CWE-440",
"name": "Expected Behavior Violation"
},
"discovery_date": "2026-04-08T02:01:22.896153+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456340"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the cmd/compile package in the Go standard library. A no-op interface conversion prevented the compiler from correctly identifying non-overlapping memory moves. As a result, the compiler allows unsafe memory move operations to occur at runtime, potentially causing data corruption, memory corruption or unexpected application behavior.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: cmd/compile: no-op interface conversion bypasses overlap checking",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is only exploitable in applications that contain a memory move or copy operation that is subject to a no-op (no-operation) interface conversion. Furthermore, the source and destination memory addresses involved in the move or copy must overlap and an attacker must be able to supply an input that triggers this specific operation. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27144"
},
{
"category": "external",
"summary": "RHBZ#2456340",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456340"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27144",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27144"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27144",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27144"
},
{
"category": "external",
"summary": "https://go.dev/cl/763764",
"url": "https://go.dev/cl/763764"
},
{
"category": "external",
"summary": "https://go.dev/issue/78371",
"url": "https://go.dev/issue/78371"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4867",
"url": "https://pkg.go.dev/vuln/GO-2026-4867"
}
],
"release_date": "2026-04-08T01:06:56.908000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "To mitigate this issue, review code that performs memory copies or struct assignments. If data is being passed through an interface (such as \u0027any\u0027 or \u0027interface{}\u0027) just before a move operation, refactor the code to use concrete types or explicit pointers instead.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: cmd/compile: no-op interface conversion bypasses overlap checking"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-32288",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:00:57.624222+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456332"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `archive/tar` package. A remote attacker could exploit this vulnerability by providing a maliciously-crafted archive file. When the `tar.Reader` processes an archive containing a large number of sparse regions in the \"old GNU sparse map\" format, it can lead to unbounded memory allocation. This can result in a Denial of Service (DoS) condition, making the affected application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "archive/tar: golang: Go\u0027s archive/tar package: Denial of Service via maliciously-crafted archive",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32288"
},
{
"category": "external",
"summary": "RHBZ#2456332",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456332"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32288",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32288"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32288",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32288"
},
{
"category": "external",
"summary": "https://go.dev/cl/763766",
"url": "https://go.dev/cl/763766"
},
{
"category": "external",
"summary": "https://go.dev/issue/78301",
"url": "https://go.dev/issue/78301"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4869",
"url": "https://pkg.go.dev/vuln/GO-2026-4869"
}
],
"release_date": "2026-04-08T01:06:57.416000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "archive/tar: golang: Go\u0027s archive/tar package: Denial of Service via maliciously-crafted archive"
},
{
"cve": "CVE-2026-32289",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-04-08T02:01:05.911683+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456334"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `html/template` package. This vulnerability arises from improper tracking of context and brace depth within JavaScript (JS) template literals. A remote attacker could exploit these issues to cause content to be incorrectly or improperly escaped, leading to Cross-Site Scripting (XSS) vulnerabilities. This could allow an attacker to inject malicious scripts into web pages viewed by other users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32289"
},
{
"category": "external",
"summary": "RHBZ#2456334",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456334"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32289",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32289"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32289",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32289"
},
{
"category": "external",
"summary": "https://go.dev/cl/763762",
"url": "https://go.dev/cl/763762"
},
{
"category": "external",
"summary": "https://go.dev/issue/78331",
"url": "https://go.dev/issue/78331"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4865",
"url": "https://pkg.go.dev/vuln/GO-2026-4865"
}
],
"release_date": "2026-04-08T01:06:56.297000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals"
},
{
"cve": "CVE-2026-33809",
"cwe": {
"id": "CWE-1285",
"name": "Improper Validation of Specified Index, Position, or Offset in Input"
},
"discovery_date": "2026-03-25T19:01:55.384019+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451437"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/image/tiff. A remote attacker could exploit this vulnerability by providing a maliciously crafted Tagged Image File Format (TIFF) file. This could cause the image decoding process to attempt to allocate up to 4 gigabytes (GiB) of memory. The excessive resource consumption or an out-of-memory error would lead to a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: golang.org/x/image/tiff: golang.org/x/image/tiff: Denial of Service via maliciously crafted TIFF file",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33809"
},
{
"category": "external",
"summary": "RHBZ#2451437",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451437"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33809",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33809"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33809",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33809"
},
{
"category": "external",
"summary": "https://go.dev/cl/757660",
"url": "https://go.dev/cl/757660"
},
{
"category": "external",
"summary": "https://go.dev/issue/78267",
"url": "https://go.dev/issue/78267"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4815",
"url": "https://pkg.go.dev/vuln/GO-2026-4815"
}
],
"release_date": "2026-03-25T18:24:04.222000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: golang.org/x/image/tiff: golang.org/x/image/tiff: Denial of Service via maliciously crafted TIFF file"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…